2896ef7b3a595993948646edbff64ed32d089e682f82dcfb1929b899e7aef2db9dec1c77e8548ab80581d8f01ff674ed2dc09204563529d25fa077be7777ddf19408eba0d50ba424710b06e32329b504bdcf3d0c5cfa065d57df3d24bc7a9b1676ef93bfb83afa226e7d0a2f1af44f2881b8392cfd6334e8957a56081439d4c156c9077b4fe582518f7d4b0d69c89d13f0828cd751de0e8e2f6e44723f5bee4de844cd79b6ad591d5639d69d5169686f7d8bf28eeb7cec95a4ce25da76d479aa13b0282116e4613b9760481f95beb25e05d6f8c472a60b95bea299", @typed={0xc, 0x88, @u64=0x1}, @typed={0x14, 0x35, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @generic="e66c86775fdc6be04c946366d340170f955ba1bad36dc2edf31e78978e832873a72c0d509c75920ea57c55e9e5f8fc8d7117df85f1e21e3c51a4098d44a034afb76fb2261807a149764fef4c39c800a3b50b5fdbdc814a60e367d090b3b2f5cde1847da64a5fe55f2b534bbf6ddb25021250af99e883", @typed={0x8, 0x85, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @generic="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", @typed={0xc, 0x63, @str='cpuset\x00'}]}, @typed={0x8, 0x95, @pid=r4}]}, 0x25e0}, {&(0x7f0000002880)={0x1f4, 0x3f, 0x203, 0x70bd27, 0x25dfdbff, "", [@typed={0x14, 0x2a, @ipv6=@dev={0xfe, 0x80, [], 0xe}}, @generic="7e002bd0b47aa7c85cf70fbff8d1a4a7de583197125355e9f6f3b0d293f0535ee53edde11affd2b3a82687af905fdd807e95378f6a5654f2c9accec2bc8d7b572b59a4ec66ffbf341d862c780bd3ad90ba665776411a2b18251b434516196aefd770a4c7f0f677ea9c21dcd7c0cbba8390f343f908e7c349b0d250b78d582d92a773809d6fa2e27ed347acd0d4379a8374725e50b91aa0d72a698f4cddd7e201f74b9e863c6e66482986eca9ad3214cf96432807ea874032482947485e98458afd3891dddd48bcd1952894a1a60ed92dae4f709d4aca5db3c03bdf19cbb9d27ed9c8a6", @generic, @nested={0xec, 0x6d, [@typed={0x4, 0x83}, @generic="600e31bda26ad5a864b2a1513d746ed9988fbb6e758b7db5ae5b6b3c8bd8233f6432c7d03511d1e9622b05bb6f4f97725b99f007b9c6284b46a82dbb3256f00b4beb9496caf3da7d3a2332a8f0de86cf420b48e0ca0095484dc73b06a9c8b954b784c3a0534c9714cfdae125a8bb41c6a5dc07f8dcde5670bfe8764c57e803b6cd364b9cba3cb038d5457bb4ce57b9ea95441ffa199525b4cbd83d11", @typed={0x4, 0xf}, @generic="8a0eb439ffc34663dc309675248443d32d58a4bdd8bba943ac558f059d9e91c4cb290262372d223ccdebf2486e", @typed={0x8, 0x1c, @ipv4=@broadcast=0xffffffff}, @typed={0xc, 0xd, @u64=0x3}]}]}, 0x1f4}, {&(0x7f0000002a80)={0x230, 0x18, 0x304, 0x70bd26, 0x25dfdbfc, "", [@typed={0xb0, 0x0, @binary="143ff43899aa139a69af2c58db1d143c0c81742c3b9e7e0c045087fab921a22dbf9682ff09c142dff2ed07a403d7b4e4d2da3ebebbcf3fdf1322e6e370a6f7e55fefc6c2e582d45d87fb13c0c388935d8c580dbf0caa50a712864e9616f53c438bc5a16ed27907a07fa386f606ca90867cf86e79d629d76699ee5ca0a2f1ac055c079802092f2683138e81aa1eb94eb2abe044e410be7e0b9cc43ffc966760ab1af68043a478a3106f670e"}, @nested={0xf4, 0x66, [@generic="284ecbfea24b9319d8b570ef495123569509ab", @generic="70ce711bb512bc181fb45b758e49f0e7e1b2ded0a9672189c0e2fa52126157be5873eec5d414d75d5e7019b0ee23db4954d27993a0dcd02150646137b427940a62f82cdfd4a9e19b4772d8c1eada4d772239d0d577eb9b40e50e1c57d4aa7e39e57604fe90ca4a5c8962c08f99be059f5bb2f5fc07d52146bd4cebdc402153a486da7b9f4a119117005af0adf516b782354e05480be7c34a4be5cd900b454e1ecc28c625a5b7ca5ddd221179", @typed={0x30, 0x77, @binary="ab2d19e2b18483f36b95cb2940803940f2e7b6f6c51fd662751f4e9600721c4a8dd978d2c32187e04fe3"}]}, @generic="f4d8a5ec60b96ab54b6f0631b1fdf1d02fd767ebe016df1b024a3f05cfc9118bb66bfd207b107f9fefcdbac506f325e78e4fcd0671eac73e49c52c3066b0910ad6f22f3ef9e1be98753e8754cd987309a7422f011c49d55931cf30d8596f172564a7fa24b39c8f59f1f580fcaa6692cb1891fc72488ec26019a1"]}, 0x230}, {&(0x7f00000000c0)={0x3c, 0x2a, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x24, 0x32, @binary="f7c881926d3b8fffd08690df3e4a2ac113f45a5d226f929f4a8b12ca80"}, @typed={0x8, 0x0, @u32=0x8}]}, 0x3c}, {&(0x7f0000002d40)={0x17b0, 0x32, 0x0, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x1d, @fd=r0}, @nested={0x2c8, 0x17, [@generic="dd808a5911b79dd58b268a3a1c62aa1ff300390e3c4276d1c1387ae93fa8ae91c347afcd78a3ed30b2d5251823b8742d47fe230d219aec7413b89f062c72608c847d878b7e455c949011cb878a1a96a8e20a5026a6ca102fd5dfdfd4243c3b43296a14d4fb7d6249b10fe0076eb6cb50b9bd483e189d654e6dc61ca48831b1b0cdbe1d0b510082105c98220ecbad947d3493e6417f15ecffcf479842039c5518c053fbdf3f41e0685e3ac86655ebdda67f2e7da827779d882bb05a3ac0da929d99d5df34ab9991cc6f2002fe65c0f90e0520c67c5ecc247e456de55006834036e0b09bc16ca218495b61b89bd752a12de5c64d4e58", @generic="1602c63daa1e4378b2743a54a95a14e8f05187c3b3577d0dc26e8ccfa73084c59cb1cb41047940cc306dfc52a1caf343c49c059f0f6a53dbaaa5f934516b0e83fcdc15a65163ab5ce43ec442e4830f0cc3aab9112276ff3a045740a8135e943f93068cbf5f3007f6614cbf9c95adfbc22cc6b00fab8b281b590885161f3a833213c39b96726cd74760385c370cd3626b4293adaaf45537229b95fc66d07d31e9c1eea2f801fbeb8d5ff22b5c7f066aba9842503f84339d716196ac2daf701a3ad876602d0e4f1090420f876e9ea8", @typed={0x4, 0xa}, @generic="d60a17594416ca26d201f93ae2e4481d10eaaca64272992547ad2ae3439c14934d0388bf72e6e58228187098f56759bb8ae83cbf55a7e10587d4df576d0cd25cc33cf95f73021b07d7b24047ff944e1e0eae71f31b226df3f8d89861ce33d4ff0f383057f48b521083f0643ee8d8ab929d450571fe28f51ce9702572a122319d217e6e18889e99c6444a6bddba8fb05260b13320661d40a8220a4ffbf79b5afcdf0b7ebcfaa7b0f0b7591ceb6309d6fdb90d6b350738dbbf4fe7991e4684467dd2f8477624e199d91d54e2bc9f23217bab2c12c1fb8c752d1397a3cd98af19d22690363f997816757cbf76c7db756aa8aa11bacc4ab87dce", @typed={0x4, 0x71}]}, @nested={0x1274, 0x1b, [@generic="6787f9591b74f1672595d3667e2dcdc925c832fcea7beedab49dc19cc5ea363f7b54d52e6be7fa3b4c3b6e06beefc6721081322871686fb0e1a2df1a72792c4c417ef55508697f76", @generic="d1c04567c610adea332db66001727377390e791269f541a228828cb9ad262a62241d4a05362604cf8c141c73c4659f3a2ce8d8e7db77dbf736675e6a10614d1ec1582e4c465e5783e476d0d1325f452263d68068f4edfcc7d24e4259ff47bf5a0b35c7915c3e2769c79068111dde2d23fa437d5d0ac62a00e1050a21ddf3bb501c8ee613e0cc34d9406ca5c7884cd55e1a8e051a574cae7f225263064987c200a4dbd0cf618c8ae22d43cd8fe54ff03bbb210103a9c25a736e6f3974bbb55659dca009b096af3805", @generic="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", @generic="98cc6f38721238f0323af40f98e3e4b65de0e6fd7bfd6a38c5f61bc88c79f800f154483bbe4913440aa0b621d5eb96b21eafddf330c4601e6bcc8ac7ffd3ecffa92463d05eccc42d112237d3a8839916db9e7269e24487ebfc834135e9fedc3f6aaf99630a8e92ba11a8d03ca9a3d93cccb6099fcababc95422ee64cdb1a7f050f0423b1122d8ed2f650f81f660e5bf3708f9339cd9b7a659531482cffa285148ce96979563b8596be6cc68cb5d46f43a44ecfa3a1e340b18c75", @generic="e7d59045c8faaea5384dcdb0969db0187f92bca513c60ba0659cf713a5e0a0a2a8f32e990b73bc1ec79b9110a9cfd6f12750a01bd961e82021a9fa80feb6c51d1c8d103b5d5f26d085d7fcd660ba9b71c0f606b0885e164b8f86b008d91daa21515f46c05b7ec753b5efda9c8bf91d1d65d1b49e6e98122768e28126aee6e5567d0d8e13ed2acb961b93c4b98eeb6d4d899a547528a4087e902e084e0030d1790a8a4e476f82"]}, @typed={0x8, 0x13, @uid=r5}, @generic="560eb93193378e86332d3adce20e41e8f0eda6281602219fde4f34d6c57f56f2a01d5e6549897d5a94c7a5410911ee9a04f7aecb44c0fd09633ad7482905bec4f15e87ddfa9e20701865aaee1a5894b3e64d7bc9146da6707b2b6f11a2408f322a5455846452252d453ee50c7c1ea078999f2d62aedc3f38ab62ce78e1225d", @nested={0x4, 0x5}, @nested={0x198, 0x5d, [@generic="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", @typed={0xc, 0x8, @u64=0xff}, @typed={0xc, 0x3e, @str='eth1\x00'}, @generic="8fc6ceb25b87dd2dbca703df09c9658ba1f6a5d1a3456f906bd5308a5182d057098d75ccc289d31b4ce0a66ca87324b467396740524bc5134df4a1a9f5dffe3e2c18f5bb7ffbada6a167893a", @generic="1b14a58144aef5c0b350c318196fd142969829cba8b9ad0184c714c1c740cd0b8b87aaf93914856d5a990dc8e85f1f2c8b"]}, @typed={0x8, 0x15, @ipv4=@multicast1=0xe0000001}, @generic="b16e963b8b42f212c616f137fba18750d65bf6d544b3f443e47d0c675b11dd03673cbd7af18431146f38a2133c16"]}, 0x17b0}], 0x5, &(0x7f0000004700)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0xd8, 0x20000800}, 0x4040000)
r12 = timerfd_create(0x0, 0xfffffffffffffffc)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r12, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r12, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:58:50 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xc000, 0x0)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

[ 1121.843869] binder: 6316:6317 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1121.861677] binder: 6316:6317 transaction failed 29201/-22, size 64-8 line 3030
[ 1121.882953] binder_alloc: binder_alloc_mmap_handler: 6316 20001000-20004000 already mapped failed -16
23:58:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xc0]}}}}, 0x48)

23:58:50 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf6ffffff00000000}})

23:58:50 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x4)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x4200, 0x0)
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000100))
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3)
accept$inet(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x10)

23:58:50 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x4002]}, 0x6)

[ 1121.933095] binder: BINDER_SET_CONTEXT_MGR already set
[ 1121.940830] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:58:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x30]}}}}, 0x48)

[ 1121.975973] binder: 6316:6317 ioctl 40046207 0 returned -16
[ 1121.996279] binder_alloc: 6316: binder_alloc_buf, no vma
[ 1122.001966] binder: 6316:6325 transaction failed 29189/-3, size 64-8 line 2967
23:58:50 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x5000000}})

23:58:50 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000064e000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setsig(r3, 0xa, 0x12)
sched_setattr(r2, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000704000)={0x0, r2})
recvmsg(r4, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0)
dup2(r3, r4)
tkill(r2, 0x15)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r5 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)="7fc477dab389173a7507236b027ed48f1e01639f02746bc5b775b7d9603d6eeb", 0x20, 0xfffffffffffffffd)
keyctl$negate(0xd, r5, 0x1, r6)

23:58:50 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x4]}, 0x6)

[ 1122.035967] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1122.052244] binder: undelivered TRANSACTION_ERROR: 29201
[ 1122.059911] binder: undelivered TRANSACTION_ERROR: 29189
23:58:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x10000000000000]}}}}, 0x48)

23:58:51 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:51 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x30020000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:51 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xddff0000}})

23:58:51 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x400000000000000]}, 0x6)

23:58:51 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000140)=0x1c)
r4 = accept4$inet6(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x12, 0x800)
timerfd_settime(r1, 0x400000, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f00000000c0))
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)=@pppol2tpv3={0x0, 0x0, {0x0, <r5=>0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)=""/54, 0x36}, {&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/114, 0x72}], 0x4, &(0x7f0000000640)=""/82, 0x52, 0x10000}, 0xd1089603c55ffa8)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740)={<r6=>0x0}, &(0x7f0000000780)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@remote}}, &(0x7f00000008c0)=0xe8)
sendmsg$nl_generic(r5, &(0x7f0000002cc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002c80)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="8e00535f5efa510557b0aa87a4449b5b5f06689010f7f4c5ddf67a20bbe8c733081f6ae3b7a9efbf54b07599ab0aa1b7a2fbe16a2e79ed2998f6fcb255a1636b3c52cc8ef72c26edf5faec50f2123efabc0e91f839d3855241bdc7b5a801dd5dc8ff5bd29ba8c1198e0be4d4526515a083276e4fb52cb57e286669037d0caba59ae7c7e633e5a24f6f77e4e1bccc54446d9ffad682cd7ed4dd8cf627d23daabb1acc4f83744d69e6bd7a67eb3ea6fa4b0a4367ef558f2ebf611f4d8af59b01738c852e561d3912fd1980b4caf21a698b2a2f6f05f526e4c2cb9933368a42ddf684e16a08005e00", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7], 0x2344}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)={0x7})
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x8e, 0xaea, 0x1, 0x400, 0x1ff, 0x100000000, 0x100000000, 0x200, 0x40, 0x6, 0x6}, 0xb)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0)

23:58:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x12000000]}}}}, 0x48)

[ 1122.700553] binder: 6362:6367 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1122.742051] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1122.758777] binder: 6362:6367 transaction failed 29201/-22, size 64-8 line 3030
[ 1122.779417] binder_alloc: binder_alloc_mmap_handler: 6362 20001000-20004000 already mapped failed -16
[ 1122.790713] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1122.807267] binder: BINDER_SET_CONTEXT_MGR already set
[ 1122.818205] binder_alloc: 6362: binder_alloc_buf, no vma
[ 1122.823829] binder: 6362:6383 transaction failed 29189/-3, size 64-8 line 2967
[ 1122.832452] binder: 6362:6367 ioctl 40046207 0 returned -16
[ 1122.848441] binder: undelivered TRANSACTION_ERROR: 29201
[ 1122.854725] binder: undelivered TRANSACTION_ERROR: 29189
23:58:51 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x10002}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xf404}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0], @ANYRESHEX=r1], &(0x7f0000000200)=0x2)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
connect$netlink(r0, &(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x10000010}, 0xc)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))
socket$pppoe(0x18, 0x1, 0x0)

23:58:51 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xa00000000000000]}, 0x6)

23:58:51 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xff070000}})

23:58:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xd]}}}}, 0x48)

23:58:51 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:51 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x80000000000000]}}}}, 0x48)

[ 1123.033579] binder: 6398:6400 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1123.058122] binder: 6398:6400 transaction failed 29201/-22, size 64-8 line 3030
[ 1123.094362] binder_alloc: binder_alloc_mmap_handler: 6398 20001000-20004000 already mapped failed -16
[ 1123.108157] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1123.121245] binder_alloc: 6398: binder_alloc_buf, no vma
[ 1123.121491] binder: BINDER_SET_CONTEXT_MGR already set
[ 1123.126942] binder: 6398:6404 transaction failed 29189/-3, size 64-8 line 2967
[ 1123.132363] binder: 6398:6400 ioctl 40046207 0 returned -16
[ 1123.163151] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1123.177363] binder: undelivered TRANSACTION_ERROR: 29189
[ 1123.186900] binder: undelivered TRANSACTION_ERROR: 29201
23:58:54 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x5, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0x200)
setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f00000000c0)=0x80000000000, 0x4)

23:58:54 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd5ff}})

23:58:54 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
sendmmsg$alg(r0, &(0x7f0000005340)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="aa54c456b614b527e5f64a664e78db597958c969657b6b041e725da625ebb00a3c1b482d69be30fc3665074bcc9938aad37bbc7d837ba089b36cf0445569f2d2f39ec420ceeb1ec6b65f8bee4f5deb858c2348ebe0ca541fa889871be54dbfba6f8fb51b49136336a3b64387eae0662d3e686fc7f2ccbff87e786a72cdb1fe7d91443140c5e07b1b46e6c13435c9f44320b76e693e27ef5304519e4b60ed25fc44805e4b53b03c6b3251d1800e3e7955236f01a7843524ff4b2ffcd25329", 0xbe}, {&(0x7f0000000080)="2fdbe5fdab59f1118a86d770aa656527246a3d601e3c515fc9", 0x19}, {&(0x7f0000000100)="a8ac00f2f121f6f37a2a20a3eb", 0xd}, {&(0x7f0000000240)="b7ddeee71e5d54c80a26c6a7e224adb76098f693219d78", 0x17}, {&(0x7f0000000280)="e8885ad59687b51355fdae67bd369233dfb0833942821a400b0f02b44de74b7b2ff033043ca8b0fd8a2102b9ebaa11014b69590863ae5da8ff39f51c8e85eec547e54a4913b72d087bcad74b36db42f4", 0x50}], 0x5, &(0x7f0000000380)=[@iv={0x1018, 0x117, 0x2, 0x1000, "7c6c2d1abd89c5ba8e930f6c354a9c5dd593ef45d8afe16c8c91509bc462afc8628e1f4449ea00741e0ad0d7b3ef409667b80bdc74c7c7f3b65f7a8768da975ada8b5b34038fb8f7b2c8df1535b5171e4f54c76c1d4ba6def8c01d08a2716e1686ff57a9092338887d5a63a158dbcb25169832a3cc3d61944dd27923ae2f9fbf1b9008fdd124fb42e9fd7661aa51467883b98a3c0d0c883f6af7fcf151f317398d3280d2569a9646f32b6a14064f0fdaccdd59cc747bd3bd5cc2165b07569f4004e43eadc99faf14c144f865e537a4678fba78745b6d271f2b6b142760ea3de81577908d5357e585c8b5f3996abb9cea50c2c9483f5b760901ddb6de0c6c01de2daf54ce3ac995f58ba099ab1fd23a4060c7d37b9298e23e1357fc74e8a14ebbd0333a153188b91e88d5bfba5af55ee52d6adaecde8194d4f0db8753525479f30257fd61466799bb927b7f497387a04dba6679ab92ef14451bfbb4bfdf8ad4bfa8d76facb9dd05156daedb661b05a711cdc9864189705177f0ec21566e18d34a9d810a0054cbbbf3d87f123e03294ae6a6ddc53dc6c5681bf95767b4899aa54bc92205ea2a3308cdbfc9434fa28d5e4a8a5eb28e11d0f0bab5f5d3ee492a4f5b0ac9afacf61295029842c0c1b5f86829c7dc55e9132fc6d37fffa516a136976dba9c6324744d5f49151ee63f4804d597ffcd547f7471b43a4dd2dcb9414cdf4aa1b05abfdc60f9ef6452c53e39e20288944104527ca287cc87be7f4a2f5915bd5ba1d2e27e47e6ca8a8f86eda8ecddf76bcebd5c17ea74642f8920291462590d43d56914e1fb101ac3b5226c9e9b6831210bd3c738919d75fd86869c5ccef11dbae780373457aaa2d82a68e90a7ce8aa53981d475b9b4991a7bd49a0c9cbce09a0ed0ed02b8ae47081c0c4d545afae3a02a95d7fc71bbe715253067b199b8425710212c8cc7fbd1be4d96c9d69a0b9f49f918e2236d011018ddcd2e5c111a4e549e108bbb249586d1519972cca144f65f33c6c7cea58a6e3d512656ef155b883b9cfd9260d0e71afd1f5614f68e8ae1b2645d97131fc8cca41120f3732603d63c9809fab1a0bb7a766b8e7e2095027ac27fb7dcf3baf1e55b17aadcc95d923076cd2eecef12cb7481080246581d3c1a577d3152e4fa66711359eb7e7d8e5d5f36efc5b11b3fc703c1922228be4b14ca9cf0c1ea970570412f77a942ed99f7a95e076da0d91cd8729159732a66f970f52e58d6313cf1796befad59e518a5937b9de8ead4ed015b9d1676778a39627b0fb747ad9ed52c05fd54b0914162abfa3b192ff0aa4e661d751edd29c7a02bae93e8cebada4b8e0c4d81698984c273e6062cc0f3d48ff3be57fb06942eeeb692271afd023912b04c1485a376f06449d5fede6fe3dc147a54b7f62e85169983c3b5e617e0c9fec762a6b0738aaeaea0d33783d2c3003a43aca4c938462b2c491abc8c27b0fb17c0ac66d9d39a6300d58ab3176d7a873e1d1b2b698723c63c5fd02eae3c2bc02feb8ff3648b596c59b19407b42daf88a7cafef7d2f1cddffebad7dd4c0c37bd0826737bd0ff5dc63d7c4fbee5a29cbfb0969466864bcb8ce11db270ed7e5c956b0189a0ee795e1610084546bf3b86fe25bb5e1204d80c2463d6750a2879ceac5394479e95a87908c06f035f3d1de8fbae862db238b6e76b2b292f0c4bc65c7433683d6d5d7746ff949f4d7a3260c22e2fb63839d037f81a3c910e9b4fae95799e449cd8d3df9090bb9b973c35ebea04f1c107442091e0cb5b5f3d86197447d04dd06179ed269646a041c62ad617347d91faa910f4473d5148ba302d209cc4e66d4b63c5728656a23c36976f5aaca37c1fad578db87346571455cbe9f6ee35392cb88b488c8fde02eb87d80bcb9bce8ca116f68d02ba905ffad4a3467c11b4b2a870979308f3f530f6029114655606e95db3a0f9d76f6d8e5b4ff7023e9d7f807aa27bff8e311894da734e294e1c5b4bb826761aa8f0cfa6334c129cc3f09e6bf88c2c717be04689a2c125bbe9fe3ad9ec2a981930b7d13753e529a04fff087ff12ec74d29d209d4f512c28d03b96735911bdaceb6c0a1ade905946bc308a20f2f991217d72a1d00cfc00c9c742a83727ae9d1a34f4b59da03369b5e73e38abf3107ce6c04b1d35367558a46a61a2e96366b45704706ee36724ee5bee990e1700bae483a7a7ddc0fc52ec05cee247154da1ba35ecc06b53568ce6da26c5ce5c63c5bb1dd212f73ba90ea44aa59eaba49a38170717701a67786af4dce13bc65cd5403cdb6f08d693ef0de1c37293f11ff06451550cb5f1f118a00bf2d3c26411eba0a2a8add61c27e53d6030e7fb914bdad85dde576a20754e4aaa1ec6569dc8b273829da95f25d1967c753d6ba73893636e7840f6339b045348a9e71c821ab33006f9679189e8e0eb393941f42ecbeb90685955d98f56eeae2b793bffb604ed2372abcc94814d6b1b63e4c43975a06c7ba8dab16efe34e80e744ca351642d6d716c288675bb8442a390695c87c5cdf39355eb9f712ec1cfe7c9651d61d028e51fe73c892f79e0672c5bfc9181fabcf013633d8186272980890d3ba000b839e0f9966e4772e6ca770d10ffaa39e4661d78743afe27f11eacf09ce706e2e91bb081a04fb5d980d5856b95cca23d55839f7c80d14b1fe3deea1f930fb4cc3ee257f3a6a0a87d721f15b58117009c9efa250cc0187d2fe13b8e6c42fcff9fca4e2417628de5a7554b4e2dcccb66d8823f67da22db53c95365257fe0b0ddfe87f3621a6ce7a8cf3687aa647d59f03d7df1b08f6a1696dd8861ce94eaaa5d2acc27d296b8275238ea19a395e20d0e1dc56abf708ad4555ba07bb1a0dc8db104425b60f53e6ff26f7366cf1421cf0b423411cc2f1bedbb92f2cffa80f62a6e5c774ccc0580cabe3d91cc112114f23659f84382f6dc9428f53993bff885a1b9c20c1baeeaa484bbf328f8367d89d603e3a8ef608e97b1a23b28836aaa76c5e7e8718f592df45afa4a452655214941526785d37f1636f8542648643ca959f0bb3b4c6c8359600379f3fca3db3c0b98de96145430f9addc8d68e9c675a29b5c3dc66afa5debc8deeb8f261ce59c118da19e4b6ee95c2e6aa456c1bcc4b922a8ada29edf15a716fd4b5c9fe7543260a42271f0a7e3c76bc1f45dc1289f4b706f2db3a18edc503113c36dfaaf470cf41b9158bc1802abf3977ebd586067ee4001d464ba8e1c33f3287db58172122d161af9583cd5bfce6d7e66250b77ba17be09eb8e5de842d229837f447ad3ba33ba371f9c2763dd355fd5a34d937f7a3c9a50f1ec5de567f4a2a828aa43a4af22dd4adb2e63799656c556f3b9281006aaca2d2867111661ccb61d275ec06a27fa14d34dacb66423af1894cb290c150e1f8767a222906bf26653c027cd06b09098a6eb72b5f73d7fe797e189a01d7d2ce878ab9996cff44dc667f54e733260d386a24595222d8873d126c705dcaed30d8284176f8bbafbf08aace344252b46285985c4e502253e5b9578621c2e3a8906e74214706153479a8a68133f667dd7dd2163710ccbadc79b9c68ae42a4a8881b8908f4ba5ba6e12f6438d93ed409a78d33baa7d957a422683e0f46f1d11aa6f2f2def319814b9ef02bb6164e9cacb6dc3871af46687f0d77ade8c06107a64967a4de1762ebc4faf9965cb20e8e6637155d4aa86db7561d56f1c8f703c925f4458bb08e4e1d8ac36ed5c6b7c66720f725287ad6705c79dd467dba72b0192dbaeb1e25822fc4f9836aa37ad7d25df51d362211bdc09a661261cefa7cb56061c5a816395fae7ed1a527246c53d5b19853fab6bf7c8f41863083e5780a3077f79d0b494b892e06b187b5682c20114a0304f557c3d67ef55e3912278200098c8968f0824a40ff326ea998bc98f25519d215c6118021aa85b683404867f57c292cf379797da13877c60bb2647b533e69c18e252d17a99205ca903d5dcfdc300090cd60b0dc67497836baca7f3b5aa290b86fd95297016409282f655bedaa740fc44c024da79f62e7f75b5da9c0ab2d5cb6ed555cbf6f6f1f03c6a5ed2ddb6f66eece26565f1e0d28457251491946ad843c37225ba5a9e78bf34991dc532cdcd1dfda0fe3316564cd44bbaf6f0039b72aece7eea556441e5727d6b8c9791d2466dd6f59d17303aa1e7fcd0604772326f90510e88560148e11f767fcec7b600cfec29ffec5e4e7e4a057e8fd3a029f68f1e11e971f1d9935e46ad536cefcf84a1d6011237dbe65f90f6050a065e7aace103c1a00966dbcf6f66fee902f9e22927396fefe3fbd19b77a79044aa83db668af8900791bbf12c365ff39ddd92b8030ec3dcf10aa4486344d01ba1be94113025c46b827e674c2696fb6924f43e15889dd1abe561b670763b850c3bacd6f2c11f2e6a26d65bfb46a10af93f8c6580350d6e5d2775d517acb1600332bddc66baf780d7c02e0fd3875b24baeb1608f0b17c72b2e2a014ebe2a3229e47548f2a2c98988bc12809378cee3dbbc68982f61405d73548cccbcb82fe352206d147b87ac8b9ef3cda37ae0bb003cd5bfcffb7bed4cee4a9c9813af3218d4663dc2a342c72df6e7c8789b54435d7e9d65b7acb2b996accc3dbda14c5d2e67d479b0a5cf553f3a9634353a7fff6021c21f9be29c0a30d6e5313af61b3bc89c9613fc8273d42bc691b5bdbc4c5b3eaafce9c2b26e2d5f4c954ac5a4ed1875ecb4a109f93dcb33f03226d380c37c928613e19eea4ba08cc4373a722773f4d8194e4ee83537715bf3e0cfd73c128d193c910b21c3ec563ee5601bea06f72b301c62f7731a966c12640aff8e06e47f95a63d90fabaf76b40466e2cde4746b0ab6c152dedbb329cd0360481c102b3c853628f3f62f267b28ed58a09ba1ff660c63f396529445cbef64bc8b14c3c2bd733a9f70e9af0ebee9a5ac4492cc2880901738d1fd916a8ff2a8311a64242fa3a2662664290ef8014a60805cbf9deff2188192e0d65f163dda67e9a729301c0a485051f9ef2ceca3532af9468a738e49d7f2e28c697bf08961040be6a924f842c333099828e5d8f7196cbc55699a4a0edb326a737eb621a600e7ee4b4675edad2834a23839e01445a2b4514afe5387ad2dce32779c848b95cdda6c5cda82e1e6a63c7a97eec0bc8aa085af1208df1f48d061d863a49d72b9bdf3e5f7bdafdc95c2a69f93b23f44a83aae274b543153a318050c227d20ebd53b2f86e54a0a0b1b6673ebc580f45440fb68e8d1fe9c9656c19161c5daf8f0459993043efc86f8a060f5937ffbd2c9532a3c8c32602c60741d866d4d5d5069f63fb175ca44665373a54af24edaee42d702a58ae12f5006d2d640ad7ae3533b8099c631b865e72ade2fd4482c63cc731c151fa0a672e4b31a3f6a673341a7a7a56d3257d37e288f4e5da55edf8c112ac54855bdc577e41829c01996d5b26d024bc687d933df1eee8fe6b508b5fe39e1bb00cdbbba156b4bc083a58c4d3286d578395c27949ea6538daf49e02c35b6552e932c2d800c4c36ae607fadaa60060dff471990faedcd94c3237030649ecb7048be87488241fc8153e48df0b033560c07e73dc0848350691cdb7943260121eae4918e933e07b149589cfb58ca48e46b79f02975e645cfc577fa8aa223e219be5423ef94b2df6c09abb237151aa1a5498a797aec8512ce6469de816f7cf90cc72dfaa69433bec8c16e3a669dd12a8e081fea62eda7015a8c9c08ff44a39a19ce546df266cd5a654d2732136aaab0b9985280d1aab57a35a23644d"}, @iv={0x28, 0x117, 0x2, 0xd, "24056815b0986ea9f96a91f558"}, @iv={0xe0, 0x117, 0x2, 0xc7, "0e6a11d6d896011e99797ca8ff67dcfe4aa6e4cbc56d498d1cf10f7017995ef050477bc12ea74d4fa31758410e5af7b7a2f3a38933292a2082cf03b8081c649a8263fc6329f02c6a4f48f09d16a07d690390d176bf36efa9537cc7ff58df3af2ab0717130acd29ef83f99b99896c62a90579bbebc3888cee81b0d96db0df0dfba8cb7a8bf0ddb7db0f997ff850793478af56f0bff9f3b7eb5550895d9d2fe46b154d37c5809e74262abf1cc5251cac759f64d7428a0b630b666717c7edaa3dcadd4d1f24d818be"}], 0x1120}, {0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="fef069fc8059aa1da1beb68bc8f755974260395cd98f20c8fe0238e0d9f9707997f07d767f7e93210ad682cb24c32ba4445e106ae3307a711bc798d0", 0x3c}, {&(0x7f0000002500)="23f2ad6970e5f481df2635dcf6d09096e0", 0x11}], 0x3, &(0x7f0000002600)=[@iv={0x58, 0x117, 0x2, 0x43, "00e547fa3c999b968f61bb5d82d7f55b55aaf5a013f2102bf8f71da8c5a429b1af25c08feb74baee37d51b16bc786188c2fe495e492c3ee5446cd1292ab3cd1f155ffc"}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}, @iv={0xb8, 0x117, 0x2, 0xa1, "2c59b0b43f102e261d32dafcf6389eb46b7543258b52cc20ef41bdb307c829154bb6a6abbddd9a228c3802a1a79ae6ee6da238b3a935db91e50fe7a37b10e7389b0eccdad7cffcd196aace60bbab33d5a57c9968b62b211a09d03a29e22ce06129124fe279734ac449ee640a35a229bb7f154912488379155d43d97fd43673581478f2aa2f960bd005f0c803e2b74848090add8885356907448e9d6afe1199dc69"}], 0x140, 0x40}, {0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002740)="2d21e2bcbf6c2fc305d2b5b6e5551bf16512e5d7ddd89820d13fd2cb295693a62fef4da68cc219", 0x27}, {&(0x7f0000002780)}], 0x2, &(0x7f0000002b00)=[@iv={0xd0, 0x117, 0x2, 0xb6, "bb00ecb7834f0b8abbf8d054b597b7ea03fed8da9d01ec64fb7b01bfd6cb8e69b18c16d9e499ffc582d02079e220597cc40193916b3c74898ec13ba645a257f795cbde4c74b4250b49e87bd2f66b2e63d40120272addfe83317db168326d5406ace152d96a4eb08914e30e8cea721cf96b34d3b31b3151ad8de373137e565406e97e67c15670b1f89f3dc501c0014854a84db9b492e203393c9728f2778cd3763c41c49fb340f696580043318da33b32fc06bd628f7c"}, @assoc={0x18, 0x117, 0x4, 0x11}, @iv={0x40, 0x117, 0x2, 0x2b, "8a68c7cd13afa68bf91d8f24bc8df6a40e1eb630bb82bc8e2d69ca2564ee08fa097cfc691fd225bcec896d"}, @iv={0x88, 0x117, 0x2, 0x74, "6c701e1346fc5545103ab128419a3ed504092f8c16a8863e24024298bf1e3356a39adb7e2c91fbe160766eeb7242707d2f872a1422ca880672d1597d5a28f5b3c15ffa486d59afaf3243c668171bb67bbbf00b26bdf1144231cfdf38b7dbb937b282ef8de8871118ddd6bb6fa80abe6b251c9aa9"}], 0x1b0, 0x40}, {0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002cc0)="452fc60fb15fac3a4b18b27b041e1bd09e74df66ec5ea0793f00180240bab14fb02f10ccc4329565350f9b9a9b5366ea9654a93a44e58d9b21c83dfa7145eacb6251e3de992349b1115fcdfda254e7907d476ee569404d700d8eebcd4a33f86d35808818b01e671b275cfe729b736a52bfcfc20bbe244322c52927866ae564e86f8e92dc7447687c44cdc6ebce2a08c7e6a708826d86bdefea33718ad6d41a47ad0a3db98ce8049a14009207718a20db4b8aa1cafbbcdbd903e2c2ba2e65e0720f4a55c2e5e1fec7ae573605864772a2955f4f10deda09dd515f5b52308d87cb6497a8eae6dfd24e963a160a98a1054bfbdc6037fc88ee6e82dc446bd71da399ce8bc35ea17555291b7284ba38d0073a0247ef9ddb3fc85dc661f1971504e39ea1bfedc28646db657bd292833eb4433f11ecd6566f1b292b30145b104ec15eb0d21227a0a67249619c42f068d870c81c4813ba154ced29f5926339384b53defc748cd35857863ab8a5e14107fe9ce08651a894076e0524509a8f1e55e24d6b0a8f84d0820c0679ec707fdeb9696d1ea08098810a6947bda4be096d792bc4c161c829d89526a9b8baf6a896000732226234b7ee8049d8148f02dccda5b617161af9dbae5e57f260eaf7b9127e3deaf40ddbd96fb9b1eedb0744abc155d7ab035e2b0383c3854b4b27f0985bb09841c739f3a532e6bfeae902dbace39d49bca447e3bafa948da023c9edae6d404d3894118441ce34dbd1fc7f3e3e3d0cc0aba261b85d6fe5519d9ec2a633baa1464847a907b8dba43d4136e68b39c4a6c570832277c8c7908d229d19b8189b6d282c971a1f7b1ce50bcb8fe30bb978d40b17f70d4c0f236b75f827740e44df3d5667237d7054f2c0b7f80079b8bde382c1b0ec91b661755939036a5a5f352ab9a84837025f39bf156899a29bb4ad7a50fe543980f264771a2db2f8cf048c060fce13553ea9360f41d6731ac648e275e133ff9f58e3bdcf9e9eb0f33bec014e69192169d6e9bbe66d839b1426131e407d64a1d3639c6eb6e400196a20d50a968f80e073ea063486f04a433b365b61223185b2887544305fbfcfc485fe026db355286a98efd28585f650687927abaf699ca62daaa45cd904b315da99aad77443c353334d37c0076e4ec05a7aef220185eb2ecd13ab41afa3c2841090cd21a1445c48cbbb7effd8ffc4187c9020f5fd84728bccc566a6e3d9be5a60f5ab568f73b1a51352fa543cadffab3d56eed6ffdcf5423905c43c5e167907925e7b4b4b40223605effd7d8cb7e574632f9a6ebb46797a07f90a1486d96587b1fb3fdda51653c0c6718294ac79c30757a88a333dc45263ad10c9cb7c8f67c8102cbfa78ae9747d1486f00177c43ea4c3018dcb0a5631b6842bf95bba3ef373fd8784a5f1d7aaeb824254fb1d781f2bbebe29294284c15341413c13decaac9902fd31def2622964a814bd2d32b0a997e35387dad0136a6c3e8491ca80e3dde8b05370e1be2ea6869a3b867ecc92b5a2f1e1dd5598ca1b6f5791793b43cbf49a0b826b877db21d2cf6070651739662ad6d126c7a053e8d18ec129f39fa6c8c643c457dcf623dd1aa1fdd4aa87417b48f57e033ea949b335c47740a58c421fe9c4900fc2191a1223e8ae20c7d180254ba3d79e9b50ff20692ba2866c5451c4507127ce7b30a286ea512211885306be531179506f85679216ab8d4bd92b818eebb2fcbb6cf127b1ab9872a801dbd3d4760c88ae57d8a0cab2469a53c5277d0fe420e1e61c3f5c3ff7aee868a331acfa78d16983c322041d6ff240335b87337a5d2238dc2b5305253d5a87fea722320a020b3c9461353d395290400f87afcd14f598a1f408929392c8bd6156e4db1ee6678fdd7668e223b92485afed7f435b093cf0d11b6e8ec274afbe34198adc1331538d541ddcdaaaf37d0b56b4b37b1326626326b14da2d5a66f7b1dce424bff0bdf5dd63f12d38fee4ff54c43923ac282d8f2902b7a72d57ef66aa7f3412c712e258173923fea77cd0f0513624bc21da86644b0b9a8bf96c3ad14e39273fc50935c1983271e5377cb43a6b79c8fc5eeec64526c3ec966b081e35bdb229fa3fb7c32c111da2b6ab08bd54bf4c67df343744d9be44d630bead43b0136622c90a5c456171a88d1c096e3e0673f89b100c805759895576e14873029d70a797e132363ffd7aaec0ff7982b500e5724a67028ae9b14c7371d0fdc750aaaff5016f3f3a75135b18ea4adf5af0b1b6d070288ca4626300827d5866cc26158aaffaf56d54db518d363bf96cae7b8b3d1f5576776ecd18350720d030d313dfe572997ee75ac9497ab946e5ed98c7a57c42a665079cd86e494e44b05cdf857e3adb4205b661ca1f700657507148c746f823ba78ddbbaceddb82c1a0b0c5a8c6f7588797528387f476b785a0ca868526e4ed7221ac526e71071502d4230926d418b5213c14137e1d2659ad80319f6466a9c70bed1c3d530d2d0e3f3358cd464737ccc97fe289f18253a8f9e622c43ffdd87a2c67e5506357de595c9745781451288c7dcb7cf1b26eef8f4dcc5b6adeba712e394ffa21f26fc8317dd37b943c3c2a669008a449eab13b32f1fcdca9ebba4feb4778403d7d8431bcdce00edfd5df3841038bf8333278fc3cb49d9a3ccb4b18bf676d2d1226ffdf4feb6c4cbf83240a28927997188e81e27c1b73a3c5fc18e0ddec955037b45469ba42701f1a239ebbea9058536e15d645afdc66ebef27e07c12cf77b54931d73027ee4477bb44aa8890d17bacf3f3822fb8506b50e7955e32438f39cab8aab9608b91b3fa317e3602c911321269484cd5f9433bd307097b9852d9cd6441a2a71fde01dad820060ee5ded9d2fffe966a46500ce7af28bd987e5b88eb5969ed3d8dee33f2525c968d3600baf2711b12fb8a503e9413f9b380caf088dcba4237d931db25b9d47a9f9c6d9a287906bd4e038d6be828dc38e8fc889146c43fe923a8f51262afa92059ff2171b452d5869fee2cbed8e54f4ce548d8d351100b4f8dbbcd721efd119cda3cf2afa19aa36c0fa1ad9f4f65ef01c069965590940380cadbf5534c193bf470ab0de24d2cd0c54a0f6d540522ca10cbda6e2b131dfdb5d21658c20843331204b28f76073ccc919bbe0e6c215bf2f24682c9de0748e97a0c29895089803e64c77ad0cbc2779394022573a6717f4bc2d7fa79a92e19cfebd8919a1aa99f1a58854356db57902f2f6013ae772e7223a067ff329f57b78eabeb71ed07f1bdac58efb5f005f3db6ee05e64f4138efe79d7837a7ba9226645df8c1a118c25619d3acdcb36eb2d9cef39605e33df5c575939e04963788744b75acb7c12cc9e40f622801fc85211284d316b7650eff88574e81d327a4ed99aa238dd7e4789551e5e639e0ed5559fce02bebe7c4b1b3f7967f0574c6a2cff9bbb95dcd8d32a73cbf92b3eead0265e34deee32060ee64f29c226aebf97545a8d694d497bcb493413019fef031b71b70c502f2dce530d60a27fff5d1c72f7e3344ff3907a0ef9d86d1b761751aa5c589f6178fbeea5a5c32c463b7ca757bc6112ae47e86be0b61690996f6092e409018288e4c11d417680958e4239025526530dda6006913a9dbba52e684af090031a03ab812e1b2a3d7342a442b621f9803fbd94199abef086c6892ff70d85438ddb34d08d2c621354c7f868a7b6661d0fb991de92e17f3c34ba34786048c5283d4b87424ec411cc1eb34e69b4bafe7b513d6b923b6ff96584e24ae20a76543234404bb5b53468ce861d691711e368ff5e325a103997f05771d413f3078cc5e793a5065909996944bc534f03e227c77c16eb9e1e019728187096f9491b26d0314ca72f14093c763aa42f8360e7e8c7d76d82c25bddeafb40710b713f5a3b50cc139187a15f953e1a5e5fc76fdbdfada73af05b202b54f142f2befe21b6e78989a5e832d8f85756bfe5d9e1a06449cebef826fe385afa19df49b9b4a792f5c8795d631f9f751f14fe5cf9ae9875ea14cf984c047db8abb76cb3beb1a66cbd86edbbf7d251963e0d656105124b07f1872f72a6aa1fa81fc67cbdf4e251eeea0d4175a0e9c13fa58ff76ba7ddd4e05f7a6580f5d9332ec0b219bedb60a7586aab046e2dac4bf0a0630cf3825b226585f2fd549a862a42cf46f5f4e8bba3e5dd19542cfa21937198cacfb4c82e4dd451f03e6fd75d602485ab36e3fc49728402f01a8e3f39d08978e81710f60ae2674ea01e0be64a68f187830090c28de7fef6bd1d773b84801a5a361680eb736297a6a67ccbaf4c1d7d3869688e2958f3aec6b0d4066fcf4a523162d7921b8025d0767edee432527f2274229ff4f8da81906864407604772e66284d2740ec39b305af67c05c91b21330f02d0ed7c91425afc694702737ad7c79a6515d2fe004ed221415434ecda61a3a021ec37bf19e81ab9ad69030f42f8fe0c5613dfd5382258af0403395837a49c7d1e02db310d5461fd1f07e8083a15b614aeaef8c0080a25d7a632c432bc1c5e6ae90ead37cb25330ebc97fd9886a1456a4e29abcec51625a4bfb290ebed9b475f1d4ff89e8418e96997a2e89f61aab253652cae93166fe2d837d4258f9d2753f83dd6cfa5bd81558bb80d45f569cff9d5a560a1df9da9fcb67f51b4fd14cbe180bb2a7eb94de7aee5d8d3922d20956b6e67c25bcdd2d3b1b7642c6bfa48dd1e17b4ad26d8b659c4ca0a7cb8514465bbc99afc7cf7858c26a5740d2c2386055186169be32b12c94ef557b7b51e43212a86e0b8b6d9f39ef055d6ecf618358d9d06ae9431b2e01bbd4ab9dba2c81a59f7190c2039c5d9203ca7a59cfb72f2c8989faa5aaf7b1fb151a536a9d96b523f069dccf3c2661a94b3034a088ca8401590719b69ead3ea7ed5fe4671f24167d5704f313f1efe5c7ba45b71a3b2684a712331d20a08f9f3d3f4d678d71c9f77f185904e83fa667bd21ed11fefa236329486bd75011a64ad8be68d888eb6f0545c215a38fd1ef567d3d9a4bb8d56fe580decee34f4af2d89dc07ce5bc21167165be56e2db667019e1b2ccdf9bfc117f322edc621c5f210550b13d0c90d106f9751749ca935ac9786dcceaecbeb2b2d07d38e33f993f8a5c5f56b82775b70e46b97baf4f78e9aaa514c43a95d2462a9e01af4a11d699b4c692e7b6b531743e30cdab0b33427b5e9c54d131538a82ed7f01c8149430b6fb77de226c2fbacfd42f5d92b2d721e597306500c48113c72f49c853e096eba7063a875911c5a5c8c078017b005876e67fb22bc9017528b6edca31b75a23b78fe38e6673551c484b30551388d8945a1df312c4c8308e9a22f5434147ea39329c507caeddf3dd8f7e7dc5bf8b9356c7dd1227ed3638cc05cc1730cb2b71a58d624da2a9ae2964ca925ed9fad782b17e0c36433af70c770ecae0f025daaf2be1654fb1a7774c460d25f32b2a58652e2c069188047d35bb4ee9cad86eb49a27378db6a18dc6876bc11e084ecf1b933949b63965fb2abeae43c4885a04d28661f6637d89200221c8cff41833f4b896c7379377e102ae5df87bf119cb02af265505b007c338a071d81e0f9634dbbd61c35cff2e543a487aac027d08348576f41b965397c4c454563ffc64ab615c71c1ec2259463f2a8cb78094064b1851d2e5e99b9214806d00759e2f5537936aa3481c2654ec769131edaeebff7a5ddf9d827d3f51ceef27df1b9a2c31d71833aa24ba7658fefac7de1193665a037f1ec6a44af4751cb9144d1ba0eb29e39488cf1f85977d48155def6544a0f01606", 0x1000}, {&(0x7f0000002800)="f5a2520dac7482875e9ae9d8c25f097fdf976b88cd0cd395884b4031891d74952fb540d35169466c55bea6bdee", 0x2d}], 0x2, &(0x7f00000029c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x15}, {0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000002a00)="fee2833b8ed62578107acf5a36ed185bb461c8667c5f3cece2bdc4e0744b62d01bb3275998c79340baeec982eb8ee34b79baafcf287490238d308bd0df146cbefcfa02e65c8eabf270ef6310c4c2b034c56c0540f9ab89ffea29862703ad11a7839885d620d927e041e8f4d23719c35c052864fa2e69529e53ff211cd5385b7e3779d222cccb98fe61a87dbf2fd8f09175a363d78234f0ec612f615b7ba0", 0x9e}, {&(0x7f0000003cc0)="410f617d938554d9a4b65b26d204fa1e1e1b3073", 0x14}], 0x2, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000003d40)="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", 0x1000}, {&(0x7f0000004d40)="951745b85830d61ea102b5bc47439fc769af54a660c7f901e7f345b389ab4ddfd23bc5b6b3281116990406bdea7d4e0988e31e3aeed0b3f4ae", 0x39}], 0x2, 0x0, 0x0, 0x20000004}, {0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004dc0)="70f40cb923d0b64ebbdf9329005af93773f86185abe6057d0b384a5aa93aa1c25384f429cf4321006ac0ecfa9421d7da9acdf35cc16978bb600852a75c5b61d633e12ab113cb359713f8809158831e1ae31d2c4aadc9809297799b7372932c7f1b4d44", 0x63}, {&(0x7f0000004e40)="ff2db0b21a43a8175bfaa7ff7bd26b764c14f23ce7a0a55b94b24f123e5a17aa8908c4d3862117b369ead4df52565ea4850c78fa9633eda60f7286d5b259aa8ac24e50f96906462cc030f4ed2cecaae036440308b31dec7bbdd9ead1518d21a736d88acb86d44999168c4aab3bb8627bfd", 0x71}, {&(0x7f0000004ec0)="5109451eb3709f5d57d03d6f20279b54a1b9a143676de06fb22bf3", 0x1b}, {&(0x7f0000004f00)="59e25b6ffcdd0b0f4b0f7b3c93dcf88389275ad93ee844144459cb16c84da3495f77fbaaa8bdca4af2f073370aacbfe67b543087be0519fd7cb2f217afcb35388284ac02eb325d7a8989320f1e1970d1037f78c0c10eba49310d1518fbb351e49b8f458e0ee4a63540aec8ae12189df5447e59647e1223de85f67ac1b8f9bc3df471dd76b00e8c0b100e89ba890b17aab47e5ff48ca43ae5a2e8d6249af452622f6732f084fcec498e9103d0bfc1628f79c3882ab94a1277fd33ca6ed28bc66724faac6b41f0e723248accdf4536777252fe9fc15391", 0xd6}, {&(0x7f0000005000)="fab525044b607683b6eb7050f867de8c28edd670243503796483d7c9a1f44639ca7b000742526280ab3359b2c89d24d9e33b791f67c70b3c32990b0caf08509d5a290a", 0x43}], 0x5, &(0x7f0000005100)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x5b, "9e836ef824c2eb612db7f2eb5c91b3a1451a98d2a5c1ce6e99e4116952f8d0b878a9cad8dd4cd2868a69ec688066036da86cfeeecd6480b5c96ba57646b6d6957e0a25b4d7229aea4b242138e4002e7721c11097c384fac28992af"}, @iv={0x78, 0x117, 0x2, 0x5d, "7f4749feb6e1c8005ff5dc9e62aaa2aee2eba956aee6cd81236fde684734019647781bb84f4c081e97c77a2a7015557067a87421fd0a6e2b0f0b5a02c52dbda5a37c4e18b233fdc694d4acc6aeea08431dcb8947b1b0acc486453b8762"}, @iv={0xd0, 0x117, 0x2, 0xbc, "f64ac7645f620bff8c7bbff772101b4777fdcd28c683d98885dc7e6dfc8f9a55ac5051b261eddd25cffc2cc3b90fcae509d729a50c12a8418136a1be299c830e7644fa5bf19af6de27624abe2518e1a30bf407da3cd174218b07b237fd109ecc3110f8165708f3cc5c230f538555d1c0d83f6ba39c6aae362e2ef58747f878cc757eaa3b48f672578bdb8f0853ea8a8a0fa1ab4757c9fe36999694f3e1ec82d6f1a2ae2c6dcf7e3ed82a4a4798c8d53810725ef9caec1a4b840bf7c8"}, @iv={0x40, 0x117, 0x2, 0x25, "2c3815fac76f1eb7d0009b2f9f76017e33a45c90166ca031a3addd55880e174a951e2f5787"}], 0x210, 0x84}], 0x7, 0x8010)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:58:54 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x8]}, 0x6)

23:58:54 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:54 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xe4ffffff]}}}}, 0x48)

23:58:54 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:54 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f2, 0x10000)
ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:58:54 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x85000000]}}}}, 0x48)

23:58:54 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x28]}, 0x6)

[ 1125.171947] binder: 6426:6428 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1125.198164] binder: 6426:6428 transaction failed 29201/-22, size 64-8 line 3030
[ 1125.205856] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1125.205856] 
23:58:54 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x5}})

23:58:54 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x40000]}}}}, 0x48)

23:58:54 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20002014})
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
r2 = socket$inet6(0xa, 0x1000000000003, 0x100000003)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4)
bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4)
sendto$inet6(r3, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x15c)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

[ 1125.240789] binder_alloc: binder_alloc_mmap_handler: 6426 20001000-20004000 already mapped failed -16
[ 1125.269341] binder: BINDER_SET_CONTEXT_MGR already set
[ 1125.278176] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1125.278176] 
23:58:54 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8803000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:54 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x3000000]}, 0x6)

[ 1125.288636] binder_alloc: 6426: binder_alloc_buf, no vma
[ 1125.293220] binder: 6426:6428 ioctl 40046207 0 returned -16
[ 1125.295421] binder: 6426:6448 transaction failed 29189/-3, size 64-8 line 2967
23:58:54 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x500]}}}}, 0x48)

23:58:54 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffffffe4}})

23:58:54 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00')
ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000280)=""/4096)

[ 1125.400706] binder: undelivered TRANSACTION_ERROR: 29201
[ 1125.407596] binder: undelivered TRANSACTION_ERROR: 29189
[ 1125.421080] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1125.482463] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:58:54 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r1=>0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x2, 0x2, @tid=r1}, &(0x7f0000000180))
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r2 = getpid()
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0)
read(r3, &(0x7f00000001c0)=""/71, 0x47)
sched_setattr(r2, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmsg$alg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="7ace8dea2813534b0e0737b80e06978877bf233e2754011f7b676db3a032ee6fd6b66edb8484fa4021f7f45052e07ec39c4946bc681eadca98b2432603a50a91e1642b0f3f4ad9a562d0542b434a694731183b68ba899fffb6d5d8f1aa2eb4fb525fd26ba7a7e1cf393aa58f9895d2f67fe2238af14649d6c32c5e50e06834e6ae251a407c8bea97c74e86de3e7e357837bc47ff12914dad720f5bb1eac1a5f0881b29d1a738edd10f75e43151252899e081f9b63c833886c907d516bcb754c82367b6cb43c3cb8df90176c1f317790c40f0671efc20f97533", 0xd9}, {&(0x7f00000002c0)="b1cf478b8ae41cf4e8da6fd1e71410ad0777e9d803fbfc34f8204a7ed0204e", 0x1f}, {&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000000400)="e16d2ca421edfec26c53b0f04a1a00c0c4827a61d88298d6f05ee0047e3a576af8f4a3deeef0aad5d567960cfe8ccf7f24b671b84fc752dda1e1c82f265b212717514dd435f5410b71327ae88af17a43d4f7cdccb2a337ed595a6e02ce6994cc8484aceb2497d6ebf453c23c14ddbd5b88dcea5e216e79bc22a17c47fed403992d2f19abff0e4293d3f16a0e294a0f6548b6219069a86137973cdd2d9a065e63a8551c3d15558c1998a2358d4379c29f298ee1e652e05eabb6ced892dda44595b83fdf37a6ec452e985f3b60aea0566c2654737c141b8967a5bb35726a", 0xdd}, {&(0x7f0000000500)="74223b27d42e761b8eaa3a0bb41124b0a9cb21e0784240d7036c70c8e9e86b331c2c7ea92cf9e01812ae8e18f0f70452c40e3393553e016ef778a9d7e87714", 0x3f}], 0x5, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4}, @assoc={0x18, 0x117, 0x4, 0xfff}], 0x30, 0x4000051}, 0x20000000)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940), 0x4d6, 0x0, &(0x7f0000002ac0))

23:58:54 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xcbff0000]}, 0x6)

23:58:54 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x800000000000000]}}}}, 0x48)

23:58:54 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:54 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x400001})
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:58:54 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:54 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x80000)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x6, @empty, 0x8}, 0x1c)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:58:55 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xa00000000000000}})

[ 1126.157304] binder: 6483:6485 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1126.178306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1126.185712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1126.199697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
23:58:55 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x47]}}}}, 0x48)

[ 1126.210574] binder: 6483:6485 transaction failed 29201/-22, size 64-8 line 3030
[ 1126.229385] binder_alloc: binder_alloc_mmap_handler: 6483 20001000-20004000 already mapped failed -16
[ 1126.247495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
23:58:55 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))

23:58:55 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xe000000]}, 0x6)

[ 1126.260464] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1126.279850] binder_alloc: 6483: binder_alloc_buf, no vma
[ 1126.280423] binder: BINDER_SET_CONTEXT_MGR already set
[ 1126.285631] binder: 6483:6501 transaction failed 29189/-3, size 64-8 line 2967
[ 1126.287937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
23:58:55 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0xf21992fe5c7d029a, 0x10000080002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x200, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0x37, 0x6, 0x1, 0x91, 0x97ef, 0x80, 0x3, 0x20, 0x100000001, 0x1, 0xbcd})
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

[ 1126.317859] binder: 6483:6485 ioctl 40046207 0 returned -16
[ 1126.332825] binder: undelivered TRANSACTION_ERROR: 29201
[ 1126.341468] binder: undelivered TRANSACTION_ERROR: 29189
23:58:55 executing program 4:
r0 = epoll_create1(0x0)
socketpair(0x5, 0x6, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x80, 0x3, 0x8, 0x2, 0x6, 0x2, 0x100, 0x7ff, 0x8, 0xfffffffffffffff7, 0x9}, 0xb)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:58:55 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:55 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getuid()
r2 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180), 0xfffffffffffffff8)
keyctl$get_persistent(0x16, r1, r2)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={<r4=>0x0, 0xfc, "821c38e7a13de6fb8de77c9477c801c49d65a8ce6cad7f0eb4641f306eb61538a79c3e48900d80b442ac1dd7b7fc55f92b11cb27c9a24576f6184d3d5b335b13d6f35fcab382c713b86c057dba6302766d4918547cbfa9055b1b4a65c9ac425de84709081a59a7726b3a124131b6df5bc4d6a0cddc8eb6c140f12e6b3fbc485ea7039ddd2e44c467c8e9c7612153779b90e10265506173f1ebf01a0963d6c4d01b5f540a8abf7ee301c1d26c6d4d484819a7e7795143ac0532a24a02961fce26055eb7a37eba72af8885e272cfc96428f63c8d9a035326aa7ceefee60792d5f189359820afec1b9b68fb4d8a22307f701d5f44b92bf12c599f3cea07"}, &(0x7f00000002c0)=0x104)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r4, 0x1f, 0x5, 0x4, 0x54c, 0x9}, &(0x7f0000000340)=0x14)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:58:55 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x8800000]}}}}, 0x48)

23:58:55 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd8ff000000000000}})

[ 1126.387456] QAT: Invalid ioctl
[ 1126.395753] QAT: Invalid ioctl
[ 1126.422229] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:58:55 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x8000000]}, 0x6)

[ 1126.423224] binder: 6522:6524 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1126.445175] binder: 6522:6524 transaction failed 29201/-22, size 64-8 line 3030
23:58:55 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x230, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:55 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xffffffe4]}}}}, 0x48)

[ 1126.478338] binder_alloc: binder_alloc_mmap_handler: 6522 20001000-20004000 already mapped failed -16
[ 1126.486281] binder: BINDER_SET_CONTEXT_MGR already set
[ 1126.505324] binder: 6522:6524 ioctl 40046207 0 returned -16
23:58:55 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd8ff}})

[ 1126.553109] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:58:55 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x30000000]}}}}, 0x48)

23:58:55 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x100, 0x70bd2c, 0x25dfdbff, {0x3}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb33}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40001)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x194, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

[ 1126.596585] binder_alloc: 6522: binder_alloc_buf, no vma
[ 1126.602245] binder: 6522:6551 transaction failed 29189/-3, size 64-8 line 2967
[ 1126.635154] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1126.649104] binder: undelivered TRANSACTION_ERROR: 29189
[ 1126.658533] binder: undelivered TRANSACTION_ERROR: 29201
23:58:56 executing program 1:
r0 = epoll_create1(0x80000)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:58:56 executing program 4:
r0 = epoll_create1(0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e20}})
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7)

23:58:56 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x2]}, 0x6)

23:58:56 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe0ff}})

23:58:56 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x100000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:56 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x852a6273, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:56 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xff00]}}}}, 0x48)

[ 1127.206616] binder: 6565:6566 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1127.239231] binder: 6565:6566 transaction failed 29201/-22, size 64-8 line 3030
23:58:56 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x7]}, 0x6)

23:58:56 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xf]}}}}, 0x48)

23:58:56 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f00000000c0)=""/127, 0x7f, 0x3)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400000, 0x0)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x10000, 0x5, 0x0, 0xfff, 0x0, 0x8, 0x10045, 0x4, 0x7fffffff, 0x4, 0x5, 0x8001, 0xffffffff80000000, 0x10001, 0xad, 0xbee, 0x8, 0xd999, 0x7, 0x9, 0x7fffffff, 0x5, 0x8, 0x7fffffff, 0x2, 0x7, 0x3, 0x100, 0x7fff, 0x80000001, 0x401, 0x8, 0xd4, 0x3, 0x7896, 0x5b7, 0x0, 0x0, 0x1, @perf_config_ext={0xfff, 0x4}, 0x4, 0x10001, 0x101, 0x0, 0x3, 0x80000001, 0x1b}, 0x0, 0x2, r2, 0x9)

23:58:56 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffde}})

[ 1127.269834] binder_alloc: binder_alloc_mmap_handler: 6565 20001000-20004000 already mapped failed -16
[ 1127.289862] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1127.307902] binder: BINDER_SET_CONTEXT_MGR already set
23:58:56 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xeffe0000]}, 0x6)

[ 1127.326648] binder: 6565:6566 ioctl 40046207 0 returned -16
[ 1127.344822] binder_alloc: 6565: binder_alloc_buf, no vma
[ 1127.350453] binder: 6565:6583 transaction failed 29189/-3, size 64-8 line 2967
23:58:56 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x500000000000000]}}}}, 0x48)

23:58:56 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1000000}})

[ 1127.372475] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:58:56 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x4000, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

[ 1127.399721] binder: undelivered TRANSACTION_ERROR: 29201
[ 1127.407796] binder: undelivered TRANSACTION_ERROR: 29189
23:58:56 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x42, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000340), 0x4)
r1 = socket(0x10, 0xa, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
inotify_init1(0x80800)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r0, &(0x7f0000000440)="146251d8c2764f7ea5eaadfacbad160ce9f78fbf9c90a7c4c3bdbfa7cd7e123ca66bae200eb1f3f14d49d3480f7e565cd7972f171446c0a9ec12c40c29b529582a2073d908b7d86d96f44fcee911c77ee3e02982a73b7315364a32dc3dafd221ed41d287cd69df0646312e5874ec6479b999f662b4a16c9de6dd2fe9162c5345dffc487d", &(0x7f0000000500)=""/180}, 0x18)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000300))
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000400))
r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x280)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r0, &(0x7f0000000600)="3604bce2a2b3705a39d18c82d0fc01c0414705bb"}, 0x10)
ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000380)={0x2, 0xfffffffffffffff7, 0xaa1, 0x38, 0xcdd4, 0x3})
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="a2f2d96837c72359d1001eec3f8baa494101a5e98640d7", 0xffffffffffffffa8}, {&(0x7f0000000200)="40fe1a8bb53081e5f87e3cb1fbd06a35f53340675d1f357773b95fd6c4a89b140a97527748073aba1ed7fa5e95c96a40e40fe880c131320fcbec5f77584913775ea66fbcfcc71bc7bb9d796da2a6ade4"}], 0x8, &(0x7f0000000100)}], 0x1, 0x10)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000002c0)=0x10000)
getsockname$unix(r0, &(0x7f0000000640), &(0x7f0000000100)=0x6e)
recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))
inotify_init1(0x80000)

23:58:56 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)='+\x00', r2)
shmget(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f0000000300)=[{}], 0x155555ed, 0x6)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmget(0x0, 0x1000, 0x5400000a, &(0x7f0000fff000/0x1000)=nil)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x155555555555573c, 0x7ffd)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
r4 = fcntl$dupfd(r3, 0x406, r1)
ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000340))

23:58:56 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c00000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:56 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:56 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x20000]}}}}, 0x48)

23:58:56 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe4ffffff}})

23:58:56 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
socketpair(0xa, 0x800, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={<r3=>0x0, 0x3}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={r3, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, [0x101, 0x10001, 0x80, 0x5, 0xff, 0x80000000, 0x3, 0x401, 0x80000001, 0x2, 0xfffffffffffffd6c, 0xfffffffffffffc00, 0x80000000, 0x7fff, 0x71a]}, &(0x7f00000001c0)=0x100)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x9, 0x4)
ioctl$TCSBRKP(r2, 0x5425, 0x9)

23:58:56 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x142800]}, 0x6)

23:58:56 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x4800)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100))
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

[ 1128.153342] binder: 6621:6623 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1128.179308] binder: 6621:6623 transaction failed 29201/-22, size 64-8 line 3030
23:58:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x3000]}}}}, 0x48)

23:58:57 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe087}})

[ 1128.196129] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1128.213941] binder_alloc: binder_alloc_mmap_handler: 6621 20001000-20004000 already mapped failed -16
23:58:57 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0x3)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:58:57 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xfeef]}, 0x6)

[ 1128.249403] binder: BINDER_SET_CONTEXT_MGR already set
[ 1128.261194] binder: 6621:6623 ioctl 40046207 0 returned -16
[ 1128.267933] binder_alloc: 6621: binder_alloc_buf, no vma
[ 1128.273505] binder: 6621:6643 transaction failed 29189/-3, size 64-8 line 2967
23:58:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x5000000]}}}}, 0x48)

23:58:57 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:57 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000003c0)={0x8, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}]})
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000400)=0x6, 0x4)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)={0x90000002})
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r5=>0xffffffff}, 0x0, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, r5}}, 0x30)

[ 1128.301723] binder: undelivered TRANSACTION_ERROR: 29201
[ 1128.312695] binder: undelivered TRANSACTION_ERROR: 29189
[ 1128.324500] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:58:57 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7, 0x400)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={<r3=>0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x12}, 0x4}}, 0x100000001, 0x100000000, 0x1f, 0x0, 0x9}, &(0x7f0000000140)=0x98)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x5}}, 0x81, 0x80, 0x401, 0x1000, 0x80}, &(0x7f00000001c0)=0x98)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000400)=0x401, 0x4)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
getsockopt$inet_int(r2, 0x0, 0x3f, &(0x7f0000000280), &(0x7f00000003c0)=0x4)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x22000, 0x0)
ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f00000000c0)=""/49)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:58:57 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x2800000000000000]}, 0x6)

23:58:57 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x344, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x9]}}}}, 0x48)

23:58:57 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3f00000000000000}})

[ 1128.391013] binder: 6670:6671 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1128.449064] binder: 6670:6671 transaction failed 29201/-22, size 64-8 line 3030
[ 1128.477269] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1128.489060] binder_alloc: binder_alloc_mmap_handler: 6670 20001000-20004000 already mapped failed -16
23:58:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x4]}}}}, 0x48)

23:58:57 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x200080)
r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'ip_vti0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}})
epoll_create(0xc6)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=<r4=>0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x40000000})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000100)=[{}], 0x15555555555556a1, 0x80000001)

23:58:57 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x20000]}, 0x6)

[ 1128.496442] binder: BINDER_SET_CONTEXT_MGR already set
[ 1128.504881] binder_alloc: 6670: binder_alloc_buf, no vma
[ 1128.510492] binder: 6670:6694 transaction failed 29189/-3, size 64-8 line 2967
[ 1128.522853] binder: 6670:6671 ioctl 40046207 0 returned -16
[ 1128.536293] binder: undelivered TRANSACTION_ERROR: 29201
[ 1128.542463] binder: undelivered TRANSACTION_ERROR: 29189
[ 1128.550382] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:58:57 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, r2, 0x300, 0x70bd27, 0x25dfdbfb, {0x7}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffff8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xdd64}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xde}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6e5a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd95}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd8f}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x45)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000280)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58)
fgetxattr(r0, &(0x7f0000000080)=@random={'user.', '(mime_typeself*eth1}&\x00'}, &(0x7f0000000180)=""/246, 0xf6)

23:58:57 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe2ff000000000000}})

23:58:57 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:57 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x113, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xf0ffffff0f0000]}}}}, 0x48)

23:58:57 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100))
epoll_wait(r0, &(0x7f00000001c0), 0x0, 0x80)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=0xffffffffffffff9c)

23:58:57 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xe00000000000000]}, 0x6)

23:58:58 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x300000000000000]}}}}, 0x48)

[ 1129.103590] binder: 6717:6721 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1129.129698] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1129.137760] binder: 6717:6721 transaction failed 29201/-22, size 64-8 line 3030
[ 1129.159011] binder_alloc: binder_alloc_mmap_handler: 6717 20001000-20004000 already mapped failed -16
[ 1129.190994] binder: BINDER_SET_CONTEXT_MGR already set
[ 1129.205880] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1129.217660] binder: 6717:6721 ioctl 40046207 0 returned -16
[ 1129.222976] binder_alloc: 6717: binder_alloc_buf, no vma
[ 1129.229456] binder: 6717:6730 transaction failed 29189/-3, size 64-8 line 2967
[ 1129.251595] binder: undelivered TRANSACTION_ERROR: 29189
[ 1129.261725] binder: undelivered TRANSACTION_ERROR: 29201
23:58:58 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:58:58 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x14280000000000]}, 0x6)

23:58:58 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe1ff}})

23:58:58 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xff010000]}}}}, 0x48)

23:58:58 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6800000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:58:58 executing program 1:
r0 = epoll_create1(0x80004)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20e100, 0x0)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/40)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000440)={0x7})

23:58:58 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x852a687300000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1129.510526] binder: 6739:6742 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1129.523849] binder: 6739:6742 transaction failed 29201/-22, size 64-8 line 3030
23:58:58 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x20000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000280)={0x100000001, 0x5, 0xfd5, 0x0, 0x0, [], [], [], 0x9})
openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x0, 0x9)

[ 1129.559388] binder_alloc: binder_alloc_mmap_handler: 6739 20001000-20004000 already mapped failed -16
[ 1129.581709] binder: BINDER_SET_CONTEXT_MGR already set
[ 1129.596153] binder: 6739:6742 ioctl 40046207 0 returned -16
[ 1129.604269] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1129.604716] binder_alloc: 6739: binder_alloc_buf, no vma
[ 1129.619255] binder: 6739:6758 transaction failed 29189/-3, size 64-8 line 2967
[ 1129.640604] binder: undelivered TRANSACTION_ERROR: 29201
[ 1129.657923] binder: undelivered TRANSACTION_ERROR: 29189
[ 1129.692125] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:58:58 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80000, 0x34fed008)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x6, 0x250000)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x3672abd69a292cb, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:58:58 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x3f000000]}}}}, 0x48)

23:58:58 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x2f66696c}})

23:58:58 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x40000000]}, 0x6)

23:58:58 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200040, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)={0x0, 0x100000005, 0xb0cf, &(0x7f00000000c0)=0x40})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:58:58 executing program 4:
r0 = epoll_create1(0x80000)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x6, &(0x7f0000002600)=[{&(0x7f0000000340)="1245296b77127c51a7b4ac033f33396170cf6a72683c40c87263214e2982bbbc68e046aa5ab5216543bd761861ab724db255f33c16188bd802936a7f618d5504a7ef29595608514f1b7efbd8ff5dad7dc9ee58e146c8488b8419e1915eae62b47f91ec7fa42c5c674bb1030c8dc31b", 0x6f, 0x8}, {&(0x7f00000003c0)="705af87421a6b5ac0891996e515e92fa91a010aabce683e87e6d3517f7fd210635fcc794795a8104d8ac139a5015a8b9e300c4643f1d6546f43523e374664b1d7c2230ea60fe48df04ced2eaff7d2e95dc548d91563cfb338a9029f914a186f313c6c1b745684bdeb9694abf32022fe14f8b93de374d8cf3ff7f50", 0x7b, 0x1}, {&(0x7f0000000440)="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", 0x1000, 0x7f}, {&(0x7f0000001440)="9646d5aadfe336b1013117a261e5e175de4562dd865e267a1c6cee87a7fabbc04b4ca021f17647121811b037247d019a669c92e2b9fdf673083bf992207b9ae15625ce05850aae93396d977e1ef8778c8400b19d75a530f890b05f01cb723377a444f73f99a5aa5a9c21df2581c675e9bbf5bdfacb24885672cd8a2bd0a48a2b15bfd8e8d58c1bb88464c92c9a4bb870ed5a78cc596a4d1fb11d1641ba0124e29f28270a7f8afb4a84adda5c23c29a46f88ef63f91f57ed1514011d67d3e4264cd0ffe8ec158d7f3945ae2b37b89ac915138c544e142ee7fb5e0ce6526b99af425def54e6a015fac02fa978d9f83", 0xee, 0x8}, {&(0x7f0000001540)="41630cf897058ac5675c3f9f4b4813d915db8f0053843900f22d75cc7881abe358398bb2ce4df9204d5748b46d76e2e40678433edd0e9d6cc21009754ec858d7d252c2c5b57ce5ff9e0e5cd896f2db3bcfafc90ca0e1af088a537a93731ec32852adc79cd40874857a3ef2c2a2279192864880ffae95211ea2383e4c7f1f7f29aa7535d1cd19bf20efac5ca6f2f73c66d6f6f039d0bf89f815832f0ea6f8165ba1a028e47a76499da60f3c60c45628978ac11906ff4b448ec5ac816276abc21493cb6768c7429ed0addc34860aebeef30af1f38eae3298b9ae7579fca575d034345b7c6aaf0b25cab60d72a48df100bd25717933758580c4a905644f9dc0c7b45ef6ba82941842a5fa2d425039f2123b57b4398b31da4d374a008a1a95da32505fc1c25eaa33c44af17f8e919a032ad3d6123beeca51ab9e3b0c26956d06f20cb2a14bd2043543e13225330786890c0de2b4f9b263c533ef6bf918b2852dfa5bd4f44f58ee226e04855f4210da48c8a20b885ec9cdecabd56a5cb3d107050517f1adc29d6b9d1dc8185ef98a991f41719ff2874ee27e51e39ef046c24384d9f664cc6af974c952a974af64863374fe9b664f33625211f568961e9cc06175f39d3dbab9a9b65f4d0f00f92326a76deb5cba3e260389a768209723c6ef7bc8e6ba189348655c385d695e39a08fbc7e5ea6c1501301cf7938c0166e7e5ffe06be5a2872902a508cc73bc6cee70377c4cb473e5a413f306e75666794743bde2f32a431d5868acc42b1ca758c64572a9368f4a837b456b88de640d49e10e0ca60480b16c492f1ce98b7d257d5014c7362545d0d124e4ecc9cc3e365e3742c709a4a4d71efac91b8ee8b9a4baa9964fb9806103664f4a3dc28226031fa2cbb91852c21db973b2d17c60df92db3102147eae90b9034eca0ab080adfd822d44852f2f714c361b73dcac87df0f2fac9ddb41fc0a9a52dd90ada24d1dcfdef43d8a5f69d50492deb086bc6976fa688e03ee7f2087ae5bdba683fd77df0483f45a345269695d1ef0ff31d49c758ccf3c9b8e6b72fbcb109cc1825e63173ed8e474787d2d90046ea358d781916decf52cf42b5279d491b41789076951a8ce747315eaf39d95e13a6c20882ce3f22429b1a7f26cd223c96246434bd64fc6040ef880acdfac89d4f24a16462dd589d4d47429dd2ca1e6d7c8ff807774e5d61d7bc249e0c3b17b354c794e2670e41bd11a833ad1f83d6a102ab7add6c0525d59ad6c52e3e2de966d1f8c29ed6a17314dfc08cc7bebc5803341785067fc264490553497d273af69cacdc06f0d5efea3c050c295bd15e00d9c8bc141a03fdb7e9e90aad4e0aaf7a949df585c82d4928573b40ff1d206e99a9d8a7f7b9f5169c01cb5a59e743ec0af928a85a25055ca0964f41c9dec286973687593ef2726f2c664813b60c3dc0ad93891b0241e17790a52251157bbc856e3f4f794d879f6d81adfd6b1331b8a9c5da03d4eb2eefc4a41a850a6ed8cc9a96939c39a94cafeaeed745088b96470c873bcfdf8ac06d1bce5a99e17e44882ca18aed632571dd9b9e6e0ccca641a4902446e00dba49933e89232fbfc09c63d783560d9507c551dc74a95286e312dc512807778836471f1dd09b61ff2defc2a621919d854f7a2cbde248b3f0a1562707c76ec8c608549e3695bc1f07a0bcdf7c9703aefb2bd28d99d3502079399af51cac71c8744ecc088e970393826ea8e711bfb0f8919862f050a95a5268fb91a24d8f744014d40e80030fc9b5db7ba1d22cf89b2e1448062e0f3b79b923891bd1b99a5b983f9608bbf05f1e6011f16a2bfd6953c16226dc65b3538e946629ba7259d5b76d3b81b84d36dd2835ddaafa23c123ab98be3c2a066cb4ec5acbaeb3ff63306883ac2dc7957742bbcb0fc1724e77c938449cf8afa69e8ebbe8e1280517612ce77522f19d8af47a6dc1db0e5c6941d94088589d30deaeca716b611d6fd63c3697fccf9d899391ffb7456d0609dfff8dbe2bdbbcf3ac1c7e108aea09fbe98b4471b63feab258845a308ff68d7320467543fec0cd7fa2fc976c7943a5acf8f72febcb43dd92e1cf56e5f85327581dcbbdae1c4351bad12e6332d958b1acd5d07890a9ba306f046365891bde2fba4dfb50c38bc61a53d1e54c151dff58a2dcc9c9a57734051ef5184c4185e27e5b7ad1936218ac59990673d949290e60fb19a6910748472b53268e0a8fce94834a280b02ae5f64f577cfe938a9828fc5ede72ebb4c54f2e34286a603032e23aa703a9799b7c1c29f9f36c1dd8bce811cfe32fc0a535346ddda273744b10dfd5ce48b85a17b61c2aa910b0ca177d9d40cc7052e1cdd1473878df482c8507cd93ae90a6cd0d3d0a61b4d74826844c0d0044d16663a5d9eb69c2a0e7a7617f1082f92278a1631d5dcb1c74df6f366fc35383204458c5551b80961bd2c20c62c39e009847b4d3c81d3082f6e5678a96cdb6604a946d33437528a71d8a2c9c53207477453f7621516f9355c2ce6ab1979bc3456c215691889931ab98a66a26b1cbdbc381f73cd77a0a20793b7c9696cbbbf7d747827425bd7667862289d766ccc98b6470dd9568a98e0aa1ba4cfe85cf7ca262697b88043c33472757adeb3ee85fe31971adfc9e9609df81251c21fbc27b83f7b2ad4f231f657ca5a8f96e03e9dbfec48fc9c4fcbb67a23438d7ac5d91737b8cf3d603d0eb7e37af7c7e934d75483cf308829dab59b519d8dfaa96f221c2a8d394d3ad4547ffd6db0c5b73d3454814252c4e09f7ef9966643c99d365ff8190d46f454728b54c67a3bbcc764b4420b92a173de8514adefe9e80f889d8c2849a9b646bb13490c1f5c9cc06e0ebd1672e546033705ff10f446368e56b253af3b0231009769195501ac8ee187163b0f072f559c375968d85712bdb621d31bafc26ab42f4e5f99ba7e35e8620eaf61c0e2179b4035d55f9e29204a908bd04fc47e448c18856a0045c850ae7f0a59033b26857421e87c0b09dd88445bc6f4d0eddea10d61e384411d65bbee2b9e04a59fa514b94dbd370add50f1d0cd68df0a4cfdbb06ee8ea39713e1ce49d1980a946e9b82e1da400f9c73ac5a49e10093b7661971b65e43752ea77f932434fdad9d46c79ac7d1e6f295161f9ca472a2420cb57080754ecf34f2c5d6708d7a0e4e435d55fe98cc95d0d34dfe5886475e3f3e894fd298d090bb9a87357cdd6bd7d91a666233b322168ee3ef276cd01e29b3ce8e1ac0fcad3e94a3b5ac1e55b1046da45bdfce2abc16c93ef506c8f985d4ee13714839349a298caa20e2b8d0e9d6e7ff558fccee307d8be06cc2ada43fdbb71b3d26e7c0e1136a0cb2299bf8ec595102560cf298847b9b81fa7b257c952b23d3bf6f7d47898b00069f239712aafd31118da917c0802e5a25e424f872b8940abf641c1a8ce18f180e7056b3196e44d4aba20245c9df45183b78bdfd7219b9f5015e95c11a995a83d2d0e622d42894ef18b698b18b96282dd6cba091e5e654b9d4558543c49cc318e9ede1792c3a53e0e0cba1b87c119d9bea6ce919fe083fe7657b15253bf909a487b6c8f6206f7c3593c1587f5bc1aa4557eb25c37687dafaf544f39c80eef76b0ee15dd831885c5d0750d16d85dc4cbd8d391cf0e7f2e76466be6925c27e2fa11d056f4285c1ea89301e03eaad121f3e3a9909cbc75887621049fe4512aa43c697ffc85e6d124d99ce8d226ceaf7e6137a01f85f294e9fac013e593ef32fed94f182a60a0704ac6633daefc41a7fe2f3d95db2e04d337e19e0d4f75e460fe0c715a3190d5b8167f6caa27cb75ac1b6efb73890a043a53f939929e78f5e4e4a455d04c86c7c7c73bd3028e409e30216668db0582a7d9a1c64dcf757a5126f1b6a4a3c868ebc83eafa597a693f9082d4cef63adfb147941a5d2cdd87a7a70ab535aecb3a32ea9612d45600fdf6ff7c08a517341111d82002349cad320fde9f37d9edd77f49f774347741bcdfbb6d67e08c812d7e024bd4cb681278d046bb54113f8264aaa96bf5402ac1bcbc02f1584e02ef1c5df68ae30028127ff19bba3eceb9c67016e7369f31a2c8737db268293827b6bf6c997d97c51c28e94d1f19298b89c8271f4d102dbc4308e00c84fa09f92b89f84b9f8fdbf2bfd77b14235e430c8d14bc1682ca241b7d6e70a0e68fc39ac034d850bd4d37388233f1893c986d2cc3a1e1d3898c9df741eaa61c7f13d9eacb3fd92a4501a7a0467d9fa52c936e021c05b0476bd57bcc2ef2860e182640ca404e6f34f946518eaa5f7594f5201f9be33f4cedf8208b69c5ff2f235087ec23f1ad6bc9ad4ca48c1332ebc217905a00db76fe56e5396d0f1bea345ebea607cc0da48d6864304c2e09cdc6ffa4573180ca7a62a7aa3c9eb4ab34b4314d5859f0fbab6b7da8b1aadda5a5d7e1f8fcfbfdd6b9b7137d65071994e96bff4c5d658425a5eb338d6f109a26e6bc0ffea05f94460814989d21daf4cc6cf956d2fc66e619c3e418063ff79222027106cf0229ab1731f93ad0617a6523deda66c2357e8147271e87deda52872bc76cb5b290d28a32c0fd37bed09bd0060f565e74347e80a7c49a40fcd72b49f88043e40faf006ddb4de6e33149ae0ed4216c64c0ab7562db7ab791959e5395ad02eae455270608dfe4687d907aad47594cdb2deeb7d70e531bd0ec309e5f1f02efe6be819ed13281f576d8452abf61bc3c17f4a519a6c18d8bcf28d48056d2ec1241da702dc17116492b1b25e81b46878337068f262b0076045914ee3e56fbe189bb5cd8580d8e9fc7e69e683fc37f33a6a3cee17405a0140acac8eb9e683bb5411c7bdeeb953f71fc24352b01a388dbe3c5777d6681ec15748716e372ed4307443d3f11270da5687d6d8e83fc802254debe74f828512c9a338ff0c4b462a278a3d0762000043848b73d06bd7e0bf4509e441f1ddbc9fa41f22c97b45595b7f8f05d75789dc00849cee4e8512a936f52d98cc7de18a82cf7d39986730c3c6ee5503590c303b8027798903a5cbab9d1031da3d17319c2c73cb73425cac7b3307a4ad518c65ce39bb034ee5978cd95a109a90c66d15a899c725a20bcd9edcb05df5ce24387141cc3c73ed33afe504c85c472205a00b1f702bf867e25627676c5a6fd182c27afc10e3fc2f1523579a81cfa11ac0be3c47bfe3c0b9094ea0dcbd7b11f68ba5f3c75e0171361b00258ae8326ea9fda21e5b7a3e4ff658966782fad55a2e369cfafe64b66781b315281269877bc758b976a180851d4fb16402ed925c82bc0b670f32528e651470d55cbcef68ce3a21cd4868529dd33eaca75cd1832db0cae43bf7d6f1002558acab98f4a6224f1463071de83dacb2ee6eb2749bcb671c4df5cca08c3bf5df10d6ae7ed725f4dc0b6f8c64285ff29951f6e14af41e59970d3556146a3f4873aeef3f66598ba40d0a84a4d44dd8a604a75ea31a4178d214d8d1b15d2c864ea583d510588fb9f264bc1a2effd77f83d7fd069d852e5fa87ae57758107bad7e627040fa010bdcf12822a06e4febe142a10ae22f09499ab0ce1d02eaab4f6fcf4b2e3d5bfa96f8814c9140dd405fd036ce63c3530592a9b9668c41007e256ceec101b8a7181beb6308ca9738ffab05c4fc08d0970a97c082133184ee3a4f9b7cf3773645603ad0dcc6bf9a12b75943a32b11933acbe078437a85e800869c5f626016916cb1955f416a0842ca941698584896b6d3ca6d252a7623157587e83ec5739bd6ae7a86c10953038d7841c345ef3ede1d21f498fea031d37d7f8ca7acdb667", 0x1000}, {&(0x7f0000002540)="84dd8ff1312b40e4e6b4d1a3498b1d91aa9d4520e70e4d26594432c614c5146a67ae156c34befebf3783deb05e42f6e1ef5cdc84a5a700ee90cdb92c239224e8172a7fcb8e43cef68e1b4dced75440371ae89af063c89a6f49186927ef8535a2541847a18833506957146ebdc38aaf4ee4f60c9b22f0c9c54140213a867ddeef0db6c2c5c1ffe515556b357d01e84765b348", 0x92, 0x9}], 0x40, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r2=>0x0)
waitid(0x1, r2, &(0x7f00000000c0), 0xc, &(0x7f0000000280))
epoll_wait(r0, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400, 0x0)
mq_timedreceive(r3, &(0x7f00000026c0)=""/221, 0xdd, 0x4, &(0x7f00000027c0)={0x0, 0x1c9c380})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:58:58 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:58 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff00000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1130.118974] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4.
[ 1130.122879] binder: 6778:6781 got transaction with invalid offset (0, min 0 max 64) or object.
23:58:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x1000000000000]}}}}, 0x48)

23:58:59 executing program 7:
sched_setattr(0x0, &(0x7f0000000280)={0x0, 0x11, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='pids.current\x00', 0x0, 0x0)
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000080)=0xe8)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000002c0))
r4 = memfd_create(&(0x7f0000000300)="2d776c616e300516706f7369785f61636c5f616363657373776c616e31656d3000", 0x3)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000340)=""/53)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000400)=0x1f, 0x8)
socketpair$inet(0x2, 0x0, 0x4, &(0x7f0000000440)={<r5=>0xffffffffffffffff})
ioctl(r5, 0xf46, &(0x7f0000000480)="6c7d2d3bb5a1a510f7d610f41dbebe47dc70784d22a78c05596bc9875ec937570d7f63bcef70272e8b5537c9a200d6bc6766a54fe931ea9fc42238b49387")
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, r3}, 0x14)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))
r6 = dup(r0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f00000000c0)={0x8ca3e9f8a74cb22a})
clock_gettime(0x0, &(0x7f00000004c0)={<r7=>0x0, <r8=>0x0})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000500)={0x2c8, @time={r7, r8+10000000}, 0x1, {0x0, 0x7ff}, 0x2, 0x2, 0x7})
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0))
ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000580)={0x0, 0x6})

23:58:59 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x700]}, 0x6)

[ 1130.178166] binder: 6778:6781 transaction failed 29201/-22, size 64-8 line 3030
[ 1130.186843] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4.
[ 1130.195849] binder_alloc: binder_alloc_mmap_handler: 6778 20001000-20004000 already mapped failed -16
23:58:59 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe2ff0000}})

23:58:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xffff0000]}}}}, 0x48)

[ 1130.224816] binder: BINDER_SET_CONTEXT_MGR already set
[ 1130.230423] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1130.232135] binder_alloc: 6778: binder_alloc_buf, no vma
[ 1130.245306] binder: 6778:6801 transaction failed 29189/-3, size 64-8 line 2967
[ 1130.262926] binder: 6778:6781 ioctl 40046207 0 returned -16
23:58:59 executing program 4:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x404401)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept(r3, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))

23:58:59 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xe]}, 0x6)

23:58:59 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x73682a85, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1130.330915] binder: undelivered TRANSACTION_ERROR: 29201
[ 1130.338829] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1130.348409] binder: undelivered TRANSACTION_ERROR: 29189
23:58:59 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xedc0}})

23:58:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xf3000000]}}}}, 0x48)

23:58:59 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
ioctl$FICLONE(r0, 0x40049409, r0)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={<r2=>0x0, 0x6ff4}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001280)=r2, 0xfffffd38)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001180)={r0, r0, 0x0, 0x5, &(0x7f0000000180)="32361345af6f96263f6731449421233c076ccda67d3e81ca0f29590abeaf901add55992c1e553b9f243a1eddf9edc3024e69355c2c26a7252bae5e057ce151ccb7a5310f5b0dddca2ebdf681fe179c03dab561af31bbe534d4df1bd4f10f85ecbfef4678a76e09fe1741e9d2b685411bc4b7c7efb56cd60e0ce0a3035b96b9e329068d78a92604a2e17bb6bbceeba5462f7e17ee2cd2ca7272a72d6d4ab0f57d2b22ef0be3328e43c0f6a4ee4bba1d9f6a55614f04af95d8990053c64381958a0a9aa09db8f8f5986de225cd481e498c93e27185a2f89f5233ec533f779056234f783703d2044e26f2a61ae0adc4d8150822906454bcffc633691f475457e85228947fe4ff365db06240ebc3746f9005909585885d58769e0faeac353fa456605a0b1b3c939c5db424cdd4822bd96c7294e367e9390427b7bf21bde9c9235699ded97799f843119a2a462027bd88ad80e9435f4da493a93a595da7568976ca0fb8c4109e2b036c5d9f983c97da3ce33979fe5bc4a5e223aba32838c0e2aaa2ffd90b943768038f7d9b113a0fcde3f4821b81140ddb651675c910070bf2988da61debe57d937cbcfb5d116c50a6fe437ddba0c4878220d3fe913b4b03fb5e0ebae9300113565b3831c05e1b8aaf2497f758e510391f7fe871eabf4ce8ad9e1cdeda49b4e66e2e37bebc7462fcb9ac4871fc7d259190af677f2b999a3effe9582e7416c6ef910f277ef657f695869de18a83dad78019c1a91fce8f9c29fd2aae37e9c014cda55c7cf6a43c2c0f7f0fe2bc852aa3576293899bc2d363349a36f43b413faa99a1206dacedc60f34902c6f08c98e454943d00cb77299837b2af966dfb6fc890ebc3bbae8a18aa13c78acb2d27b856b8ddcaccd7c87f9a2fb476a56c18f122a7919e18248e5c20532aea6adf0680f68c15e0f28ba2cf917b7f11eafac284d916f1ab9304432c09105238f9b685b7e9a173878b191db79e65d5f2bea036c21186cf58b1eea3f7b0d01893c79d272b120b7802c6a4411646177216808c1fee55dba602421caeca17a1ad353e54c5cf237e1b938a1aa65eae2acacae297494ec8909c41ef32776d087e5f91c89c283d565ca9e26e8c07e4a1d3a171b28eb25247790790f5a1702f45de44846b741195a46b6c644afafe3f87ca4a0d5333135bc2d755bb0b97c42dcb411f8724bfc5ed1a3ff55a0e6a1160c0e638c787f989c4872447fa1806ef75d5cf8eabbfff7743c85e76733d9c9964ebfe1e0ce0c0ddd96c2ff2a3961f2495b7bced5b4ddeba4f6fc647e4198416aa3abcf55053f8ccae0a861046faa52014c21d43f9e9e98ef879a3603c3f389a2d9171a7bed9e532d6c1dc61aa5d650291811c09942646402c7e6be4f1936c212783befac2c3b53de06e988ba0faa05564c732e5a16ea234312f3391f7699ebdaf3ad6db261f90238426fcb5e7534ffbbd13a88aaf02c051458730b29971d8462c1d3824407d672f385e9bc26d657a81f9ad4cc5eae1380d1365e970f618044d74edc0a836524928ace40b4e5fe036c2445f43550e9472faf5b4ebd25c230e515dc1bb3fa51a0bf1225c1340f7c1eddf90ca294016d03027274c98c0629c04ffe9487592398f3e8b8890a2a43e32a7d05c35d3ff1c38b923780ed2492b3d523c5ac901504c9f01e2a4f8f9d84ecee850879d83bfbc40d081a1029eb3110271cec84c84ccea67d559579955771bdab951443158fc72ebf1ad998faf972e8215d49cb13582bf003f4762c41ff9fd1621c8418aaea955a1da46247c74798e3c9d7fe6d03654d0ac21270d4820df350bbcbab6bf9d0fc4ec95581d359a8430f060f78a12f99b495f499272dc5699748815cff70c35dbebed94923133d69e8901b690c8011f635677011662ef0bebc312b6de65169af5d68b18184c2b0faec86a8685606f2a1e4795ddb1c396413dc19eaa7b59cc214d08314239477ef5f5bf73d9d271646b9b029592927ea04429b6041c2435b78cf9fdada0d43fe3fd06ff3920d758168fd1424f5c14f65f648d54c3017007abe89884fc54ef0cd4ee43e6b8d049217dd65b37a5caa518c55a98cb27f1e7a487db207ce9df2911a60fc8b4a8642e4d425f65ed43c9db09b972433d4da6ab9c599e90c08dba8ea7291bf413812ccc02fe7ffefd5e6e7840aa8cbb64236cb2320424303eba2b29a0b0a85d0e6da5da5c28675be9ba1f6c19e99744d1a5f30278962c8dc19f9f6610deb1483cd0a94d43b5f7089fa11b84f0c9cf779939571b680af6c0d208ab32359681034551c056093be1c11576beac3f48d0e702185643a908f9d92107e71348f458daaf99d4c69891f061ba7f607a97e331636b3a05c38fce3a567c3aa2a5f858214a41ca518111f66fb34c46d65dc84b224ce7260b75369b7b8e65c54a51c9d221c0b063146f31b2db8da290fd773b1025d615d49861034abdfd2b77ccf1f1a195bd34d017db201a2a04bfab7567b9c45a4dfb5c78c06411316bae966741d9ec029d808f8a01749da9db2fc2706f7791016ab2fbd1b46986ae2c3fddd00f8aef6dadcdd5f2250eb6c11e98041382b2f627b427c7ceea1bb524ea37eb57a8ebb980c5c6f78a9fb3be28db9e00d7023a20c8ae5e5ea8eac7e25f5caa69f74ff175434db436a94dfbae5fc76cf33fb88a5665b60f021c8715a63bb6adaacecbd1c9dd11e7731fe05692a433386a9a69ff9f9dcd52c569cbc2de7dec4f5f01a1be6e71ca6511daddd49f3190cd8d411594f443e45cf898c6a7acfc464e645f1278c7e9fab77dbb6bd460b9b32443870de80b0ff35f5aee7e3b530fe3cee4da34f63115d559efa709d57ed5c092ce0a4b9245cb5bc151045d92bd1427b2508fa54bb6db49872c33d0e6e3f283ab0abb5d913e79576081ff81ad5d263ed784b17d3465e4e823933503224fd1e5c20a72e8d4d58838c5bfcda6bcd9e74df8773d2528c2beec6c9be60c2c6b2b022e01b661626e0cbe037d9316e9525ef959589f7e3b4624dc2f8b2aabd937e14cab18e237fa8e30b76110e8eb421fde9e81882cd06922b37423a4dc78bf8cf22560cd06d8b5691ebeb7ea759886732075c2c7d0bb38a0d7caadfc12bd71c9d70d8d6ad4027b7de60b03bc3d32e8db50039978bf86ac260799462d5ea1f2997e01bcfd009e6b49beec031db16474de39dabb1b66c00230d5bf9d242177102bc4ba533f6f62282794711f5fb326d81fc5520b3563f2a3c3800d1622d21653f260507e88ae47e06e03b27f82916a6c52726848f55c753fc30f29ca84e1314488ead8cfc4fbec9d6a4bfabcbc04484de03d0d5d9f0c649a7a82cd08ed8afdb0e6de96f96ddef6f98300ba38e55c4a2d6dd6c9a89543804d650b8d4d9d7f07b4932d7ecbc9b8070f4cb0d7c8013f94328754112a8b186d27682bfe8d6345e7a2033e66a2951aefc690e6db3bf29ef82de4673a00b875f292363ed5a6327a2956af5ece7699da0adbf15f361946e6da9fd126816774bad577bebb9a31bd0a38d13892cd06c92139ed11ec069b62b474483e401bbc8bc8d258385ba65f230e17f7290162455575566f9ffe3884f6fff4458e08141954d11dc099f1f992ea2d87c609b082df4c4b08f6e7a7ed05aee989c35048bec4cd9b271fda58cb302aee75cb260596bbcff344704fb65e84a8f31c94546ca9cd9a09e21da34f95da63c5e9b723a0cfcb57da9eaa55c6441e1d4b1dbad50e90e779131aadc4cc87e67cb6433e2fe171c453f2d4cec6cc6c1f4d2f2c64dac205037d46fc7cf424d47b0d1451d4146d262b9d73fd32bf90f1ae5b0a02b1995126dddfca43b2857d536711fecb5348e6953bb729d8609ee432433959537ba5a8a8170618155100dd8eb143f2c012812dc19a59bca553b8662cbb2a984c58afd7245523998a6c90860fbb77db73f13a53a0e8c3647e4b66e71380c4bb849b279ed43a1600adf7475aac3497a471ce2c9b957efd574c9bb6a4f5b5d02d0653260d49fb9ed2f72efe80fe1a6440dc13416205abc55c0660deb66bd8e18f634404f0c0b2129ff585560f4382a6101348690ebfe92d0c2219a2245ef59d9a9e097c85bc053f5a8e523a62ec76e0239f102b358d1995b10378a1873c1a87e72295a0882a7720c93297dde086e1007e73a54fb391c9ff59d456b8eee1807f4552321111cab528020e67b57ca9ef2958cae990204a94bcc6b3c6b34fb638c36c2c292a128f3a7f47673d6c2c31dfc2410de6a9246471cf1d275201e8a59fe0d825477692485cb2b6e40d8fa6f38001024a5f871679b96013601b536bb2025a6ff958686464695eb606b47a4c8d55fafe1233e9e6057e0420ecaf567d63e31b624442e4be031a29c2df0b4740e6a2b0090e4ef5e304132cd8b0090b051c50cee8991a536d1e8174a7b43ecc75159ee6f9868c5567362637690f85839e844a72aa65a1407d2814ba4adccc0babb74923156097ba0f6508504841660a27789b5079f6ff68d9fa4ab4bcd0ddd17cb766f8fdb2489b3733fa6a6549825e2c752fe42d12c801f9713bc3e17787965ec9555658fc85e2e0ed129fc6bc643e098ab72a47039ff82117c3a7c77478934b2622ef069a4c0aabd6d33d54162e09c83b7f0eeea5e8b8ae27e1b8bb8a1b86e653a2a442bc39b49ccde5c0aff9939e71455e8a03c3d3a0adf44983a3c5f598b6d2d3f115c3323f0d901b83371695a8bc9fc6af4e79b7dc81fd1b861981ed8cd52eb7e5db84c560b6585cc6cf268771740c014b0c51be161a3837bca745409f1ac0842c42e9c36e0445d1f5f2e32b15eff5ea5a6b84ae2b29a14c26d56046e02fc32bfee468924ce5ec157c06d6836101618766297896a4f40af3db47774fe6f831ecec3c8d38516e85bfa6bb2daf944d4598e66c41b7396bf9569a6ffa9f8191af1b3ff7657bd6c1d29e37f60b29abf54456ffe452790b9ee62c7d1e28f6d71a707aeac9672ec5754aad74ab40260fdf55ae0a119c3ad4351307ac6febe41e80b93bfd7283f59c4a78173b9d1242fa6866d2f80674cd5b7f51f5f7df17af0048607eb754fd6403eb42a110377a89354eefa6302d3efd54ce481f62fa7482c1da9c5217ad3512dc4103cc28ad6b93c622651f800b22fb67b9030b13badca63e74f41d13855bd8c49fd3a85b1cc2a8bc411d1ae4259b4237d26da497fca76d77a335f0e86caf6e9420a7a57d1384c6c45412ee8e33374d404ff015e84b121dc447a4219064787e79b91727dc9b507245035900c57546e0957ffffa576ae9fa24b9dc2c827cf8a72e6f8220cf99f57e3e15ec11c5a5a8b5e8fed69cd904b216d5533e677c508c1c8860974674ce84231e5fa5d0e4d1b8d008bfcfff6a55791192b7365eabbc5a3772183f8d7ce5f23a1083a09d59003a95ef0d763c08b314a8a1c3cdbd2be48c67be4891e1bca43345b89aff8ac5bae4f5951baefa6884b00dd45b61deacda7949993ba1756379287e4afd499b30cd85edc0f422bc87b2c8f27a19d519523c44d798359ed3bb0d5e7b2773c38e20e768fc86c8e9574c11125b5f9f251e20a767ca5fd7edf0dbbe92401a0769d54f52147bf0914c2dcefef1019bf30bf8ba1308a7f398acc6e51ed28391d058ef2de2229e98b1e0c3df11dbef9d05877543af48b4e4eb51f5ed4a960fda2a942698171b13d0cfbbb9062fe0d59df131db062e37e59bd5145293bf88131836eaa490e4e721009364728dec0e7b2b403c820d721a1a4e8e7f76aa97f51d5ee8402ccafd7393936b6ec9fd678573dbbfaee094be8c1167c1abbe2213d", 0xf3c, 0x6, 0x3ff, 0x0, 0x4, 0x1, 0x3, "a097be049054d8ebc334de55f6d36fef429370dc4b31238391b6e499a05c36ad0fccd1fd7099046ea2b86a2d2bc6eb387f27ad31e4b6ce7d969f99ec6aa479a4f35653b6f94bc9897e750eb4031541ab65981727474e0bcf45d64db3a82c73401028bf3ed1e7050f6a3c071b1c500f895ed6c7489cae72e6c6a3be091ba9830ba207b9adef17087528fe9e284a80da3001b8c833775bf44787538cc8ae6a529a0efc01e3d6b88358beafc9da5dd5c6abc687b19196360da27cb310dde6e537e745102074452bf8a4e88d6e1848229c73b14d29"})
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:58:59 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1130.424174] binder: 6826:6827 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1130.455072] binder: 6826:6827 transaction failed 29201/-22, size 64-8 line 3030
[ 1130.469721] binder_alloc: binder_alloc_mmap_handler: 6826 20001000-20004000 already mapped failed -16
[ 1130.483332] binder: BINDER_SET_CONTEXT_MGR already set
[ 1130.491541] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1130.491541] 
[ 1130.503425] binder: 6826:6827 ioctl 40046207 0 returned -16
[ 1130.510447] binder_alloc: 6826: binder_alloc_buf, no vma
[ 1130.516317] binder: 6826:6838 transaction failed 29189/-3, size 64-8 line 2967
[ 1130.525624] binder: undelivered TRANSACTION_ERROR: 29201
[ 1130.531567] binder: undelivered TRANSACTION_ERROR: 29189
[ 1130.553177] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1130.553177] 
23:58:59 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x12400)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000300)={'raw\x00', 0xe3, "06a97c7e7d560ccc2b59f7534319c21015a36e662f25825af342a37b782488a530f5e7d7ed9a254654f11c819967510b92efee3de2f3916836aec5581890076081e01f7669c016bf3751d1661bf8b0df8b9dd9ee687ebbf5a6469be312c3604ea2fac7cdf04e4a78fa8516304fba3ac8b8b7293b40541fc20f96039fa896fba43e1cad01e5b0239ea98f441b1cde2156fecdb0fe0de55b7140780c8ce1154727a09d3c512c871d9cf6e18258616393427b1aa931d22d5143d9d554c9c02fa7a015a60de7bf59f9626ddef19576463fc15d2171c3464369c8bbb3c5df6bd917d6decd5a"}, &(0x7f00000000c0)=0x107)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:58:59 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0))
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
unshare(0x20000000)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:58:59 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x9]}, 0x6)

23:58:59 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x8}})

23:58:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x4800]}}}}, 0x48)

23:58:59 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x852a627700000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:58:59 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe4030000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1131.148176] binder: 6850:6858 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1131.170283] binder: 6850:6858 transaction failed 29201/-22, size 64-8 line 3030
23:59:00 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xa]}, 0x6)

23:59:00 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xfffffffe]}}}}, 0x48)

23:59:00 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000001c0), 0x1555567b, 0x3)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
timerfd_settime(r1, 0x2000000, &(0x7f00000000c0)={{r2, r3+30000000}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:00 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe1ff000000000000}})

[ 1131.193137] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1131.208632] binder_alloc: binder_alloc_mmap_handler: 6850 20001000-20004000 already mapped failed -16
[ 1131.236356] binder: BINDER_SET_CONTEXT_MGR already set
23:59:00 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xc900000000000000]}, 0x6)

23:59:00 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf5ffffff}})

[ 1131.263436] binder: 6850:6858 ioctl 40046207 0 returned -16
[ 1131.269807] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1131.286175] binder_alloc: 6850: binder_alloc_buf, no vma
[ 1131.292166] binder: 6850:6881 transaction failed 29189/-3, size 64-8 line 2967
23:59:00 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xedc0, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:00 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
socket$inet_udplite(0x2, 0x2, 0x88)
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
accept$packet(r0, &(0x7f0000000080)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x14)
sendmsg(r0, &(0x7f0000001380)={&(0x7f0000000180)=@hci={0x1f, r2}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000200)="9a312c835c813d07896c3d28e4ec47e930c1de23fb4a93de83a0d4ada03ce8c4154418a4ef86245e4dfa0e527a42d0ce1191a54c838b4a6a5ffda6ecdc02cec84cc240e53dd8651a007c3a65cf2fd0", 0x4f}, {&(0x7f0000000280)="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", 0x1000}], 0x2, &(0x7f00000012c0)=[{0x50, 0x13f, 0x7, "13ff5b2a76525d60d978d48b7cddc8ae8c195083113c2419999ad2cc151e4cf689bf7766aa6af7a20bdf152af53e8c31262513b3c670b4987d482d"}, {0x60, 0x115, 0xffffffff, "4bdb322347684cc6b8c7decc30f8acd94b2fddae3a3b776c602c9a92bebf026dd495d317042d4ab63d31464bb69cd0ddf3f4546d676680bec7270184764fe722c3699a7123f3590b8c"}], 0xb0, 0x4008014}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:59:00 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x1, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340)=<r6=>0x0)
fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getgroups(0x3, &(0x7f0000000400)=[0xffffffffffffffff, <r8=>0xee00, 0xffffffffffffffff])
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000800)={0xa0002000})
ioctl$FICLONE(r3, 0x40049409, r2)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000680)={0x7b, 0x0, [0xb074ef1, 0x2, 0x3fa, 0x1e2]})
getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000700)=""/132, &(0x7f00000007c0)=0x84)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
getgroups(0x8, &(0x7f0000000640)=[r4, r5, r6, r7, r8, r9, r10, r11])
write$binfmt_aout(r3, &(0x7f0000000840)={{0x108, 0x0, 0x75, 0x24d, 0xfffffffffffffff9, 0x2482, 0x90, 0x2}, "501054a6038e57f8a88a48d2e464ef8e18e498b26540f1118feb577b0b1da24e2d442de3852fbc217e3011f0e9b7d89129c8dca4fbcec78ed4b3740a310b2de5fa0037d3e04e47ad8c0180ce6aa6e53945f8f2ab92632a763a5a1da725618862cd1e6f4ff4b3917d0b96bb561893a30f43d8d0b11d669d0fe93940c405ad44cab7fa4f49894b9ae5dbcb6199fbfdc332362f42fe972fbb384a534995508f898c53ecbe9485aaec04e385de9cbced6f4795e8dc67a0c10fe5c2619bcfc215ad65e395597f"}, 0xe4)

[ 1131.362334] binder: undelivered TRANSACTION_ERROR: 29201
[ 1131.368710] binder: undelivered TRANSACTION_ERROR: 29189
[ 1131.453875] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1131.496240] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:00 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:00 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x40000000]}}}}, 0x48)

23:59:00 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:00 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200, 0x0)
ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x4c0c)

23:59:00 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xe803000000000000]}, 0x6)

23:59:00 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3000000}})

23:59:00 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdfd, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:00 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
nanosleep(&(0x7f0000000080), &(0x7f0000000100))
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

[ 1132.133174] binder: 6917:6919 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1132.160385] binder: 6917:6919 transaction failed 29201/-22, size 64-8 line 3030
23:59:01 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xcbff000000000000]}, 0x6)

23:59:01 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x3f00]}}}}, 0x48)

23:59:01 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfdffffff00000000}})

[ 1132.187866] binder_alloc: binder_alloc_mmap_handler: 6917 20001000-20004000 already mapped failed -16
[ 1132.216738] binder: BINDER_SET_CONTEXT_MGR already set
[ 1132.216765] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1132.231408] binder: 6917:6919 ioctl 40046207 0 returned -16
23:59:01 executing program 4:
r0 = epoll_create1(0x0)
write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "e4f7acad51bb88ba4469bb9bc52361140f3edfc61cd79cf29a43908fe171528b7cd881a4a54a08ff3c6f2ca5d189"}, 0x32)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:01 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x2000000000000]}, 0x6)

23:59:01 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x4700]}}}}, 0x48)

[ 1132.251360] binder_alloc: 6917: binder_alloc_buf, no vma
[ 1132.257057] binder: 6917:6936 transaction failed 29189/-3, size 64-8 line 2967
[ 1132.287846] binder: undelivered TRANSACTION_ERROR: 29201
[ 1132.294838] binder: undelivered TRANSACTION_ERROR: 29189
23:59:01 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdbff0000}})

23:59:01 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1132.353745] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1132.354426] binder: 6947:6949 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1132.376508] binder: 6947:6949 transaction failed 29201/-22, size 64-8 line 3030
[ 1132.389535] binder_alloc: binder_alloc_mmap_handler: 6947 20001000-20004000 already mapped failed -16
[ 1132.404910] binder: BINDER_SET_CONTEXT_MGR already set
[ 1132.432773] binder: 6947:6949 ioctl 40046207 0 returned -16
[ 1132.442594] binder_alloc: 6947: binder_alloc_buf, no vma
[ 1132.448182] binder: 6947:6956 transaction failed 29189/-3, size 64-8 line 2967
[ 1132.459217] binder: undelivered TRANSACTION_ERROR: 29201
[ 1132.466148] binder: undelivered TRANSACTION_ERROR: 29189
23:59:01 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:01 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x80004)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:01 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x971, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:01 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xfffffffffffff000]}}}}, 0x48)

23:59:01 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x7000000]}, 0x6)

23:59:01 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x7109}})

23:59:01 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1133.032859] binder: 6962:6965 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1133.081167] binder: 6962:6965 transaction failed 29201/-22, size 64-8 line 3030
[ 1133.096324] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1133.111772] binder_alloc: binder_alloc_mmap_handler: 6962 20001000-20004000 already mapped failed -16
23:59:02 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x1, &(0x7f0000000040), &(0x7f0000000000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:02 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x200000000000000]}}}}, 0x48)

23:59:02 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x281400]}, 0x6)

23:59:02 executing program 7:
sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x600000, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x6, 0x8, 0x2, 0xe61, 0x100000000, 0x6, 0x8000, 0x81, 0x4, 0x9, 0x9, 0x8})
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))
read(r0, &(0x7f0000000180)=""/185, 0xb9)

23:59:02 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xedc000000000}})

[ 1133.128710] binder_alloc: 6962: binder_alloc_buf, no vma
[ 1133.128819] binder: BINDER_SET_CONTEXT_MGR already set
[ 1133.134332] binder: 6962:6982 transaction failed 29189/-3, size 64-8 line 2967
[ 1133.151178] binder: 6962:6965 ioctl 40046207 0 returned -16
[ 1133.158409] binder: undelivered TRANSACTION_ERROR: 29201
[ 1133.165409] binder: undelivered TRANSACTION_ERROR: 29189
[ 1133.171513] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:02 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:02 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c00, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:02 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xf00000000000000]}}}}, 0x48)

23:59:02 executing program 4:
r0 = epoll_create1(0x80040)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0)
dup(r0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x7)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000007000000000000000500000095000000000000000000000000000000850000001500000000000000000000003d771000ffffffff00000000000000008f840000080009000000000000000000040a5000f9ffffff00000000000000009500000000000000ff883d9d93fcb7a7c93bde7413"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xc1, &(0x7f0000000340)=""/193, 0x40f00, 0x1, [], 0x0, 0x7}, 0x48)
utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x7, 0x1ce0000000})
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000001c0), 0x4)

[ 1133.258819] binder: 6998:6999 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1133.297604] binder: 6998:6999 transaction failed 29201/-22, size 64-8 line 3030
[ 1133.318396] binder_alloc: binder_alloc_mmap_handler: 6998 20001000-20004000 already mapped failed -16
[ 1133.332610] binder: BINDER_SET_CONTEXT_MGR already set
[ 1133.342781] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1133.361106] binder: 6998:6999 ioctl 40046207 0 returned -16
[ 1133.363152] binder_alloc: 6998: binder_alloc_buf, no vma
[ 1133.372510] binder: 6998:7010 transaction failed 29189/-3, size 64-8 line 2967
[ 1133.396436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1133.408279] binder: undelivered TRANSACTION_ERROR: 29189
[ 1133.422135] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:02 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000440)={0x20001})

23:59:02 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xffcb]}, 0x6)

23:59:02 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x5532020000000000]}}}}, 0x48)

23:59:02 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf0ffffff}})

23:59:02 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0)
sendmsg$nl_crypto(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20100800}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe8, 0x13, 0x100, 0x70bd2b, 0x25dfdbfd, {{'morus640-generic\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x20}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:02 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:02 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1133.990481] binder: 7024:7029 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1134.019675] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1134.019675] 
23:59:02 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xfeffffff]}}}}, 0x48)

23:59:02 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xa00}})

23:59:02 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x2)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

[ 1134.034708] binder: 7024:7029 transaction failed 29201/-22, size 64-8 line 3030
[ 1134.065842] binder_alloc: binder_alloc_mmap_handler: 7024 20001000-20004000 already mapped failed -16
[ 1134.094326] binder: BINDER_SET_CONTEXT_MGR already set
[ 1134.100873] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1134.100873] 
[ 1134.103890] binder: 7024:7029 ioctl 40046207 0 returned -16
[ 1134.127770] binder_alloc: 7024: binder_alloc_buf, no vma
[ 1134.133406] binder: 7024:7051 transaction failed 29189/-3, size 64-8 line 2967
[ 1134.143642] binder: undelivered TRANSACTION_ERROR: 29201
[ 1134.165719] binder: undelivered TRANSACTION_ERROR: 29189
23:59:03 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffe1}})

23:59:03 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x240]}, 0x6)

23:59:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x20000000]}}}}, 0x48)

23:59:03 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x240000)
r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x200)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x10000002})
r2 = socket(0x10, 0x80002, 0x0)
bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000180)=""/84)
r4 = add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000380)="fe4a239e00d9e5538a149fb2153306921fd54006539f3554417be3326ffba95e735868c88b4609db1117bacd50ad5d949570e0c7b4bbf76d63e1cab999cacfc5f826316404887ad8b4ca501e516db9da9f0dbbb2c319a663053340a8324bfb9b1765350545a26e5d431c93e9eca87a37427ceee246c93d86fc221497ca0d865948b2b456a7dafcb90d5b2e36", 0x8c, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="f5e9e13c9a6610f970a8ce66b466f77e85a3d097047b6db8e4db6756d162a4a1a91be5d340ea6ed8540068d12b0da055bba07e9a4e77fbadf77b9f53e92d3fb628f26daa66d211c6830eedd6982cb0bd5dc98a6edcb5b1cc2534", 0x5a, 0xfffffffffffffff9)
keyctl$unlink(0x9, r4, r5)
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r2, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:59:03 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x14}}, 0x20, 0x1, 0x3, 0xb, 0x7, 0x7, 0x8}, 0x20)
r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$read(0xb, r3, &(0x7f0000000140)=""/47, 0x2f)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)={0x64, {{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x1, 0x1, [{{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x110)

23:59:03 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x200000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1134.369252] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1134.411349] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:03 executing program 1:
r0 = getpid()
ptrace(0x4208, r0)
r1 = epoll_create1(0x0)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000440)={0x7})

23:59:03 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xffffff7f]}}}}, 0x48)

23:59:03 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x8cffffff}})

23:59:03 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xf401000000000000]}, 0x6)

23:59:03 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000140)=0xc)
r3 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x9, 0x8000)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x8001, 0x80000000, 0x3, 0x401, 0x0, 0x5, 0x2000, 0x0, 0x400, 0x0, 0x2, 0x8, 0x2, 0x9, 0x9, 0x6510, 0x9, 0x3, 0xffffffffffffff59, 0x1, 0xc000000000000000, 0x7eefc928, 0xfff, 0xffffffffb8e34afa, 0x0, 0x3, 0xfffffffffffffff8, 0x3, 0x4, 0x9, 0x8, 0x5, 0x7, 0x0, 0xffffffff, 0xa4e, 0x0, 0x1, 0x3d94da216139653e, @perf_config_ext={0x4, 0x7}, 0x1000, 0x7, 0x6, 0x6, 0x20, 0x1, 0x33460bd7}, r2, 0x4, r3, 0x1)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:03 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x300000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:03 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
socket$xdp(0x2c, 0x3, 0x0)
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:59:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xfffffff4]}}}}, 0x48)

[ 1135.057673] binder: 7090:7091 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1135.086232] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1135.099391] binder: 7090:7091 transaction failed 29201/-22, size 64-8 line 3030
23:59:04 executing program 4:
r0 = epoll_create1(0x80000000080000)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={<r3=>0x0, 0x4000, 0x6fc7}, &(0x7f0000000100)=0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x3f, @mcast1={0xff, 0x1, [], 0x1}, 0x9f5c}}, [0x1ff, 0x1, 0x98, 0x10000, 0x0, 0x7fff, 0x1, 0x800, 0x6, 0x800, 0x100000001, 0x80000000, 0x3f, 0x9, 0xa1]}, &(0x7f0000000140)=0x100)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:04 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x600}})

23:59:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xc900]}, 0x6)

[ 1135.137393] binder_alloc: binder_alloc_mmap_handler: 7090 20001000-20004000 already mapped failed -16
[ 1135.161138] binder: BINDER_SET_CONTEXT_MGR already set
[ 1135.180272] binder: 7090:7091 ioctl 40046207 0 returned -16
23:59:04 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xfffffffb]}}}}, 0x48)

23:59:04 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfdfdffff, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1135.191394] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1135.200176] binder_alloc: 7090: binder_alloc_buf, no vma
[ 1135.206439] binder: 7090:7102 transaction failed 29189/-3, size 64-8 line 2967
23:59:04 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd9ff}})

23:59:04 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x3]}}}}, 0x48)

[ 1135.272925] binder: undelivered TRANSACTION_ERROR: 29201
[ 1135.280254] binder: undelivered TRANSACTION_ERROR: 29189
[ 1135.338987] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1135.379313] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:04 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/72)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:04 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x101, {{0xa, 0x4e23, 0x9, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x7, [{{0xa, 0x4e20, 0x2, @empty, 0x309}}, {{0xa, 0x4e24, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}, {{0xa, 0x4e24, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, {{0xa, 0x4e22, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x3aeb}}, {{0xa, 0x4e20, 0x8000, @remote={0xfe, 0x80, [], 0xbb}, 0x4}}, {{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff]}, 0x6}}, {{0xa, 0x4e20, 0x39fb, @loopback={0x0, 0x1}, 0x95e8}}]}, 0x410)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x11]}, 0x6)

23:59:04 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:04 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x100000000000000]}}}}, 0x48)

23:59:04 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x40000000}})

23:59:04 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1135.988450] binder: 7139:7146 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1136.015616] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1136.015616] 
[ 1136.018442] binder: 7139:7146 transaction failed 29201/-22, size 64-8 line 3030
23:59:04 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x3}, 0x0)
connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x1}, 0x1)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:59:04 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x1)

23:59:04 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd5ff0000}})

23:59:04 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xff000000]}}}}, 0x48)

23:59:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x5580]}, 0x6)

[ 1136.063557] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1136.063557] 
[ 1136.080564] binder_alloc: binder_alloc_mmap_handler: 7139 20001000-20004000 already mapped failed -16
[ 1136.106243] binder: BINDER_SET_CONTEXT_MGR already set
[ 1136.121050] binder: 7139:7146 ioctl 40046207 0 returned -16
[ 1136.160268] binder_alloc: 7139: binder_alloc_buf, no vma
23:59:05 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x47000000]}}}}, 0x48)

[ 1136.165931] binder: 7139:7161 transaction failed 29189/-3, size 64-8 line 2967
23:59:05 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r3=>0x0, 0x5240}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x8, 0x5, 0xfffffffffffffff7, r3}, 0x10)

23:59:05 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x74, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:05 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1136.194515] binder: undelivered TRANSACTION_ERROR: 29189
[ 1136.205337] binder: undelivered TRANSACTION_ERROR: 29201
[ 1136.284824] binder: 7182:7185 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1136.288190] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1136.310182] binder: 7182:7185 transaction failed 29201/-22, size 64-8 line 3030
[ 1136.321244] binder_alloc: binder_alloc_mmap_handler: 7182 20001000-20004000 already mapped failed -16
[ 1136.332562] binder: BINDER_SET_CONTEXT_MGR already set
[ 1136.334606] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1136.342562] binder: 7182:7185 ioctl 40046207 0 returned -16
[ 1136.354451] binder_alloc: 7182: binder_alloc_buf, no vma
[ 1136.360052] binder: 7182:7190 transaction failed 29189/-3, size 64-8 line 2967
[ 1136.369311] binder: undelivered TRANSACTION_ERROR: 29201
[ 1136.376301] binder: undelivered TRANSACTION_ERROR: 29189
23:59:05 executing program 1:
r0 = epoll_create1(0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x141800, 0x0)
bind$bt_sco(r1, &(0x7f0000000140)={0x1f, {0x8, 0x80000001, 0x4, 0x0, 0x9, 0x3}}, 0x8)
timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000280))
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000400)={0x5}, 0x4)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
vmsplice(r2, &(0x7f0000001880)=[{&(0x7f0000000300)="0195ec157c0f77ad7df0f16ceb8f5e25f36eae896341fbe24d4c33ba9056588573a153b10a26d5799cb4921b833e0a8123107c170fd9cb85a9e9958d26b31ca0f92db60e62ba4e43531d7bc670fb25cfdfc7ac80a18bc23a5326757ea6542589d5b075e8870feead2a988b3a78f41a27888b2032726755e97147b2b6b9af95a178322c650a71ba3477ded039ae8a8876c99c55eaadb8f5eaedf91ef3d395e626f53248c8617a847f55576c98d6433316a625f40bdc0ea120cc247551b95705cd668617a86a4ffbec1807769a521c745b9b4194af14d9ff", 0xd7}, {&(0x7f0000000480)="642ea1e245a5705d52f450959c59eb4509ca550f8b570164a6c5c4bfbc7a2b31196122f10e1d49e1798c9c1ca0187d687e3482085611af7a7c0d109d213f6d9454de8b9132e35042750716db6fd3ebd18a2f264bf98c064bccbae4b96ba8b598131d523142765b538a2b75c8ee64685e985114491c59623bdd40796fb05c480a210dc910e9f6aae5101667ba6a437a638e67ca9e6964bb8d75580ce32b4d0b5b2b7e3b5e179eaa6ca4a8ff53c965229a6f5498122bef0dae041342ad31125771c80a58574b8069f921feb87eef3410941fcb4b45166ebb7bbff3", 0xda}, {&(0x7f00000000c0)="018f2a8c3c16c59139b112083b9c3a4a9d6bc392906ab8ba8113b89245f1f0bf402ec84672ef07e6abed8fe82940b4da768b1a60a02a10060b38172af8f65c914103c72126b03897214f859820819af916dcad56ecd833caeb2579d760469f9f6d861c593666b11b3062894344a3cd4c", 0x70}, {&(0x7f0000000580)="a095034e6f2b3b6596e93f83c10002bd39de78740a50394443316bbb93573a20439964f85f43212d9ca4d6e4bb77a2e97b6dbb1d4d32b6f45bf728f2bc88e65ed939fb8df9596f0fea1994997aa9b64c90c69648f720f6eed85de1266332b8a5eabfed47027a6899c1bae8bcb7d91e4e0f0b30fd7b4b2fcbe83b641375fcfb746575ed8e7b547c1a6030a5a29f43412987370a9d72a06aa0446cf1a77b875eafbac318778fba", 0xa6}, {&(0x7f0000000640)="3a9e286d0ea19f87dc0a4447246750238beabfabfc627a75a5a717ab9e916e21b72c3d14ed6dcf6179137e93fda6ec312d4a73c157d615c1581e8dbe877bcb37f5ab8d2b5da99a37a9d1cc3d918bcfb88bffef08b0ef9b599f23d0d0b9ce8f8c", 0x60}, {&(0x7f00000006c0)="d7f4b7a74b1a8005c4a531b5d1acc3e8de90185d59ed0243a8ce8496a73aa9e9f7307b4fd166525cfb86e96d606a0f153172015b8f2052f9a23d26a343656ed805388fddc753f22e17871f2b3cbf515f21aa75e97ca11e1bf5bd94f1adfd3aa418c5e0cedb6e3efedd407945f0c4ec4ce65d84a63d86aca75d444698a59107c57bde822659447e8783b79e654b270070470d5d0a86bb8d169ed43cdb04262dbac4fd8ba7d4690be54254d5a65856cdde4628c0d707c2224b5fdc5a4f565dd190fe02582d74d1e76eb27003", 0xcb}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="b4ceecea0f41822e772bc17c3cde228bd7b059321cdd81550316c50737392f0d05ca10b1a6f3c97065a43dbb25073a7c9ae5101243c27828c5d6941638c685e8f9e5d5d874fec4300ddca1a67d6771b925268489387f4091cab10035a698c5da22627a7eeeb352e278d4fe865cf358ab54ac7711a2edb4d449dea5652e2f67a045efa9c633574f5cbd13041c462dfb34b69436ecd24a7cba4b93128e0c74b810c73b0e0a42c90b1f4e8fe10243b8", 0xae}], 0x8, 0x2)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000440)={0x7})
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001900)={@mcast1, <r3=>0x0}, &(0x7f0000001940)=0x14)
bind$can_raw(r1, &(0x7f0000001980)={0x1d, r3}, 0x10)

23:59:05 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x14]}, 0x6)

23:59:05 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfffffffe}})

23:59:05 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x3000000]}}}}, 0x48)

23:59:05 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x2000)
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0))
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:05 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:05 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffff00000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:05 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4)

[ 1136.990889] binder: 7196:7197 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:05 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000100))
r1 = epoll_create1(0x0)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000500))
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e23, @rand_addr=0x5}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e24, 0x19f4000000000000, @dev={0xfe, 0x80, [], 0x14}, 0x8}], 0x5c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={<r4=>0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x1000, 0xfffffffffffffffd, 0x8, 0x8, 0x6}, &(0x7f0000000140)=0x98)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000480)={0x40000000})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x8}}, 0x8001, 0x401}, &(0x7f00000001c0)=0x90)
epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x9)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x80}, 0x1)

23:59:05 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xffffffff000]}}}}, 0x48)

23:59:05 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x1400000000000000]}, 0x6)

23:59:05 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x200000000000000}})

[ 1137.045100] binder: 7196:7197 transaction failed 29201/-22, size 64-8 line 3030
[ 1137.059106] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1137.073629] binder_alloc: binder_alloc_mmap_handler: 7196 20001000-20004000 already mapped failed -16
[ 1137.100875] binder: BINDER_SET_CONTEXT_MGR already set
[ 1137.112541] binder: 7196:7197 ioctl 40046207 0 returned -16
[ 1137.129102] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:06 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:06 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x7, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{0x0, 0x100000000}, 'port0\x00', 0x3, 0x8, 0x0, 0x4, 0x4, 0x2133, 0x8001, 0x0, 0x7, 0x2000})
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000001c0)={'team0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}})
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

[ 1137.166170] binder_alloc: 7196: binder_alloc_buf, no vma
[ 1137.171867] binder: 7196:7232 transaction failed 29189/-3, size 64-8 line 2967
23:59:06 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:06 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xc]}}}}, 0x48)

[ 1137.225939] binder: undelivered TRANSACTION_ERROR: 29189
[ 1137.231901] binder: undelivered TRANSACTION_ERROR: 29201
[ 1137.297795] binder: 7240:7241 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1137.314249] binder: 7240:7241 transaction failed 29201/-22, size 64-8 line 3030
[ 1137.322157] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1137.335107] binder_alloc: binder_alloc_mmap_handler: 7240 20001000-20004000 already mapped failed -16
[ 1137.349440] binder: BINDER_SET_CONTEXT_MGR already set
[ 1137.355784] binder: 7240:7241 ioctl 40046207 0 returned -16
[ 1137.362682] binder_alloc: 7240: binder_alloc_buf, no vma
[ 1137.368375] binder: 7240:7246 transaction failed 29189/-3, size 64-8 line 2967
[ 1137.377768] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1137.380865] binder: undelivered TRANSACTION_ERROR: 29189
[ 1137.414603] binder: undelivered TRANSACTION_ERROR: 29201
23:59:06 executing program 4:
r0 = epoll_create1(0x80000)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000)={0x8, 0x4d1d, 0x10001, 0xb31}, 0x6)
r3 = dup2(r1, r2)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f00000000c0)={0x6, 0x8, 0x4, 0x1f, 0x1, 0x15a})
epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x9)

23:59:06 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x300]}, 0x6)

23:59:06 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf5ffffff00000000}})

23:59:06 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=<r2=>0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x5, 0x80000)
kcmp(r2, r3, 0x7, r4, r1)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:06 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:06 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x500000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:06 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x4000000]}}}}, 0x48)

[ 1137.962859] binder: 7259:7267 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:06 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x10000000]}}}}, 0x48)

23:59:06 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x404800)
getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:06 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x87e00000}})

23:59:06 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0xd, 0x3, 0xfffffffffffffffc)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7ff}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:59:06 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x9000000]}, 0x6)

[ 1138.007444] binder: 7259:7267 transaction failed 29201/-22, size 64-8 line 3030
[ 1138.019081] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:07 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sysinfo(&(0x7f00000000c0)=""/102)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1555555555555580, 0x9)
r2 = socket$inet(0x2, 0x80a, 0xfffffffffffffffb)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x0, 0xfffffffffffff000, 0x5, <r3=>0x0}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3}, 0x8)

[ 1138.069754] binder_alloc: binder_alloc_mmap_handler: 7259 20001000-20004000 already mapped failed -16
23:59:07 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x300]}}}}, 0x48)

23:59:07 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0xf, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)="2deb00f09693388a2418122b363307ded8b6746c02945c47b7058eb402a24284e2b5dde980b0fcf92fe9483dc6b487742de1", 0x32}, {&(0x7f0000000180)="88320341f5f85f36a55fe7df3acf4c5256d8857715818227755159129e0cc14b9ccc9b23b268aba4bb5afb0b8667124c12ac254170467f89b08d82ff5e5f147594f639c3a3917aa11a5f12c53ccaa4ca7a439d81d67efba00a969ea8e4d8", 0x5e}, {&(0x7f0000000100)="912da3bccad17ee5ccdc74325c69d8e692b44d488ec3447a715f038d5eaf5bdf8a9e80f0ca518cbda1934a7266c3eb212332ef85734ebd9d1c5878fd6afc56", 0x3f}, {&(0x7f0000000200)="80e76dd9728ed2b076f33a4105ebdaa6448dbe5f5bf9ef4840f31aa819c8f7dc0bba417fdb759136263c32abf2917a0d64d9a8ad01fbb13f0bb520299b4ee1ba4f2d025aea11395c9b388f58b16b3ebd20e6c90091a49b70b5655b2a45bb102a28e348f4ca01ad72ccfa29e38b2557f2711eacbb2d3bdc2488a5b01cc1cc6e67eda392fe6ec935dbcbf8340e58191d79d30a0fa68458498af192507839345c5f33c280375928bb24179d7c70062d7b2afaeeb749466111a595cccba91731fb9bdde83f2af163cee0f40577fce5415c6a9ecef9786b50183443", 0xd9}, {&(0x7f0000000300)="2ad8082ccfc0f404718031eee14471c9106d9d3178b74f3e4e94dbfa99574517979a", 0x22}, {&(0x7f0000000340)="3cc516a3582108355e3dceb6d8b7a881de3ef646a55bae1936259906504c72108918c3b810b2e4a28300acf124d5101552d5671f7bb56b0f0fb1a28fe9696620daf57fa9018a580962b48567266ce5e4e6cc711292e277e92cbef7e9f01eb9fdb7487aafa31a98de3aea272be2a53e945b70fd5f4a2c985f5e5e6e10a946debce1edc18b13fc8b7fdd89bad39c1db163029f78c7aa119a0069e3a9d1ea82c51cb1d51ac11434385beccd7575065622b50d5b2df1", 0xb4}, {&(0x7f0000000400)="97ef70ac8cca5eac65b5ae2d3ce3b0a97c07708d75079bf56a88d42154fdc1ad18d9203a07a483be30dd2806c28161230f0b722f4e5e8a3c241bd9f402644bf00ae17b6444cf2825e33128b17af2d0c836f55aac1c82e13c6477f7da46ec2253c212ccfce5b38f62f639ae82fbc11723417af5ab57f670293204c5d761517c", 0x7f}, {&(0x7f0000000480)="5601878d0ba080b59bb3d3c5327008720ca35a240852d58a8a53c97af2f7be287561dab1ef647c40be65ce39", 0x2c}, {&(0x7f00000004c0)="20b5286020f939efdcf95f424506da0a9c0ae01e2e04cf44aa9c1b9f15b27c3bc0bdce859b9119023ac0eb20bb966e8d0faeca8a93aae46feaff6cb32fa1d3b2bc4af79ca272028255c1823c989f1a53b9cfa81051299fbbc1664dddf0a421bc6a2d09bb6bd66f5583035827cddaf711ec85a190163d92c86764d17678b3526c8be3f4a4196e15fc9ddca9b133156805ba6d99fd0580c797bf99834f9b7439bd73ac2ff919e0b4d656a10d2c1669c33932dadb8b2778c59913370055df1a71de8622a307d174e298d0be61d87c7c732c683c75beccce81ce785601c5b9dbd3d2ad430d9a72509e793eb22d52021113c64c020c63e971bba35089c74f696dd31400f486b2309189a70cfd1ffd5c14dfa6323aec4df926498561ec827806fe178cee3e8ee1cb1f29a555bfeff007342d31a6cfcd7f272a7b83695a9ae19f6498f9e618107e10fad05154cfe539244234b529a576b5938b63213b5378cbb6474235eb980a93377c0b45fa56c2bdda50ef4e54ca8c682a7b7fb6343fe546e958edf49c6c632b4ae9daaf7acb6670ee405e63068c4cd74eeb5998c1b98e7fcbf42a9c3e165967727a871dba74a6df7c8ddeb954621ddb85e33e603b0c4f3b68fa196db6394a69012e13bb039b0c21a9dcdc1ff75f42dd0e75f8a1c8aee7679afddd973b74afa50d2b59bef3942ff6c71d26c4dd8fbf72df4279c35c6fdbdfccf5e1dcfc425db97f6b53f807c881a296558f26d612c08398e320eb9d45aca2f91d2c02e8ad2f98a4ef9673b866b259da587a6cb94440156ed7c0a95af073c2b639a435a4b37228a32f7d510ef3ad635c925c57215b7aea2f005e4d921334b47270c7556b520697aecd7b401a9b96bed19151df3fccb6389806c1b6e115f6d76f578baf0b224f27fa447eba761f60a0dc57e6fda267f7f7d62f59c5aee67e9612c1f21aaefd28ee4a516eae5a44f6261fe647e36ce726aa9012364984075196839e4a49e65e1e88b2f539c16494341c15600b05f257c961a793f77b1fd51284d5fc486702ec035c4c2472957d725f1a7d02039804d571b526d4c2185777e4cb6b01db99700c88d8529318d064699bf148902e14b6d8cd843145046630081d60bc08331549791992f87a7bf0aaff1e281e6d4a943f5d6cfb6626be0fc9ba2b6b34ae2a28b0c7dfb2650c50fe5c884276d4c9fff138b0165b995fd2cddad54317d02fa65c4ba80daa7bb9a76a4ab11090c85116fa8f589fffbdf853dc2c9c149cbce91d401ecead8258c1ac1676d106fd0c9d89327fd9a2775275c7e814110000047551cc15b3e607f1a780ad94941fa3d846771bc025b3bc7aad72a901d20fac6d611c337b767a5e279c57309f46c42ce772ec9f1373c7480431ab6d0049da1d750354a8725683144a81427146854600c433604ff34fc35247a5bd344f0bf22a0fa79f41ae5d3de330adf27c8dfe57605849ba30fc8ee80ebc90f454ddb4a403ec61fde44e0141ceb2440008023c2ac63d99272b748b562807f01c439e9167b826fc048609ef037927bfe5b2a4f8b0f3895a7207b76f39bef4dfd0ac6d37670f6bb6a6fc33966996c7ed58da955c77d96c60567d6f0c2ba68d9ca445b0f65409aef554fea7bef044ef536b0b42def6eff43656d6845ee31b59186b0607e993bc37b1d32de5f10146a6cfc6d5dcc2745d9261cc7227909e160850f413c0c84892139f9ce36dc6bc6289f5ed8c459890e13ebe415cff32ae1265e9523945951e34847222f8c1629bc28c83eb228d61eab6755b00f70f694d5944a346f057c51c58c2b64e0e4d1c3d0ea3b553177945311111568b0b28d508cdf566f67783de94dbfea392a18f1b179a03f65258e811d0ba64f867f03c1762e862a9c01fdd14c1ffc38600291778e8a24c7a8699b6fdabe4bb2a94095b7aa4294ee9d83c2988c31cf564f4e31440478b520daf35160829afa099ca5cd4011a9adbcc5488e2b2bd34e1a0759ff6889e2321088c4f45ce1f7277f88a945c13ba566bad6334c66e4a2a9d1f5e069e64114828a916c78e4960678637a20cdefb4d9ba6799da1ab1fda458c39bd181a353a19cfb0ba3fc4d15911e42a9a2b3b0dc6795addd21a295a344dcb5bfe5f2aacb506d31100c90a4b932ad10da5a1d164d9ed38546c00338e61ef2cc62816aaf6713f00c551da847769f49f3ad20f3301d8b8bc155f55ea88f29f732d8a0782a23330694c9696bd480b7c4eeb42a61557631cccaf6452a2c22e46bdb8a1d947bf2cac69a41b07a52315853223d6f478dbcb304709aed5a4a828ba8c5b6b4366985ed4d74066653a80e91c65b095f171fd4e041c46618ce9ba0c16109d7e185d15d0cddfdcd456c50d79fbcd09cbea2b4db1a6143d4c2be0ac86466e7b7e9383608de116505f072c7762d3850f261675d7220628f95684fef559cb1d2c33d5a247921488fe5432fe23f946a5e3b62c2446dbc7b674f66b3618db0706392942e92b52b5cdc6e814f91f492884213283be0dc80e1f3f1707b39d08cbdba43b8a93d3aa80bdff2948c3a8ebf350f83850a6480c798ff4d812a3cd0a7c943b1e40d6ef6362aeaaa2a5ed7b6a305eb48a893a30b59819bc85db2cdb7c8fee70e30308b019f0a0b7d2f1b38d79a3a1beb0b14295187150af9573cdc17cd83c81322310b6e96ee69b21271ad6ba3a11176694186f66533aceb8ea44cf5be7bff852240c899752fa6e9f499eba75700e788eba30bffd3277a0fcb26b860c3c81ce32e36313f0fd209ad602298b9142700384da0d278adbcbee8d898ff09357387af33b56bd637513d72e6c8d28a5f965e88808d6bde26ee1dd8737e5bb58dbe71b82acb5c36afdcf42c33b39568b52ff90cd8656a482bd6330faae83444ae748e328d0e7cf56f0b83606a65113058e027db01986e06f51fa5aa0d5679ded782d0e115385e062db294a349de3fcdeeea72e67594d9c69be3f80c4cbff22c8368c5c14b436ef3789a919869027c0064d9d9311b568e29e51440cb8057f157ca56acad55aa7b3d41836a28a1aea36b61c130e906625e86ea58445f10bb00d752d689b1ee8374ba0d0a0d06475324f4ca9d3019e677b6fa563025ec1420ccc003229af51d57a5c6c67d692a7a1d6810b3f6058c2abbe2e443807ce707bab52461d9ddc47eb736bfc611c3154c809780cf908cd6b6438a4c27fbb746418279a3eb597e300e61da68ac24ab5334c445fb625e4b306aefa66697e3a1c6ea3e8c09cface7e2451e6e385990ec3382725e617cff76ef99da80ad57ee90fba059caade23ba3553536018f5f84f4f8d9ff861e4935be33b369a61a8184f1fb56ab6bf03e428d0705185a05237842895beea494b4c57bfe0d2c2fffd57c8c021392e2f8be1f2d81ea58812635c506e547bae6b08cc9ea31a7ba3b32d630d0fb42de7f5b24b57314e6656884a1c4f27ebdf861b3dd3e2f2255819ece4b98d26ac9151afdf3b1ab605a7179560461bd45074cf8570a2f1d960946a92cebd176c057463525a47c0927cd361a79d2ad328f58a51658c57340470605bd9bf362fd41c98986560cbf15af277eed0f6bced5bbe02d39c0a4c2e259e30a51bd8026246689fd3509b38f4179669c2ea648918101e972f79030dfe5258327971be50889b4dc717b93d5049eaaa4f5b0b7fe856187b482e41a3430b433d29104286d6d5d686725a503ccbafde90f0f9045e785b135befc041120275f657c6f5085db6677fd618023430932f7f90c8a218efb68dcf67724c33be8d5fa2f1a485f7635db6f143bc199ce335dbb0f69f5c068f57ae41ac9829c6e45979bf8b9c03bf468a9d14f2ea014e51c930f6a75c4751758dd313b6d35157fd7cce2c6b6e89b6e6a452d4dad0894b2bda6cc63408483fab055fa187f0ab1a6e6d5651f8a1bbd04d2170c533a698c792f5f353eca7abfbaa6007944a4ee8e40f33cd90c16ee79433f91bae9dcacfd3cf34fc7ffb188d1283af940ae83e20de8ffc90b7c2549706226b58888ccae97696a0e9453ecb9e75d2da82dc63574024b2461db44fe2f41e8a3b5dba31a3e26cf73b270b295bcf9b04d18c0923cad11076207fb68c8a5763829894c9b743b05d3ce0809a473eaa7aa26b7a9fa6fcff1a042702281d38d37797d9c547d5031c2b5778c3b2f651bc7bf0b3ac44903b1efd2f3f1916e69101051fde7663ac63572cab0c2aea10113c56f6cbb232d3dc344c9aa98811c8695b45a83e4ef54ce403dd39ef54edd1f480ed123713a74f883b9218ca7d8742d8bb75a3b81414cf6ee55d65c69ea4b84e2906ed9c495ba4b9c1d59a74e819ac069490b53787b3269bfec71f29ead338d90347da4fcd6b236d4f3f76c00d5d1465ab5bd09a1c9a7f4c917a26508e0c8a24fc3430f6944e13dd2f76cecba45aa599a45dab02af9e74fcbca1f0a4a00f2c3db2ebda78971bbd0440edb92560c53ccf77a89d6717f4a8f61b6d496a38151f4e74bbed9ba9b361e6bcb36a3a32d9ccc0af68ca2a07c767beb63d6a4e11ac7879445360eef241900344c06f62bb01dc06944352c58a33b7eb8c5ac9df1da907df95607d7af2d1536ca4692f200281b105199a0d5e4a894bd61164dfca2918d96b824bfb350db5679918c16a9992459157ece44bc929566469241fc8f37a74269ede4acc51fac1acf835c9b7df862941bb0e70908ab13b45a508129fcb6b8f76f4570a1d894a3e8777f3fb44ee565541c28feaec2c23a73badb97b1ae38642655ca456602f3ca38b2a6600e87da187ad46f54956a0bbc7f4aba4c26bc21e910251944ebeb297f9ed5de0ccd4be35627d13d1e6e4f62635e58cd70f21b6a55bdec9e1fa5832710033c9d5ab6ad921fa6ab65497274524357d4b5c5253547f71a46a3682434d066b1ea7e268838803618f6d97ce8fbea923e4726f3cfc966ee45daca19914deceaefe89fb027b4895a9345e4317f91244a91503cae04ab0ba4abf5b7fbc0587fef0864af0168ce1f34751ade21a25c17de2b984c4703a2e4b88974ed2dc98f80db9928266545ee10a600528a4fd2943b5a6240425e0d6e2ca963b7d12043b43bd841879f2a3bb28dc34f9d13a00486b7e97238b542deb99db2749c2afa222ffd473307740d145976ac91a21d2470f74430b127087ccc7862259d6d74ce3e69ffb6081b5813f3753dbcb9896e149864565bd95eb24fff6be916d3b815aab36b2614aa235cc4ed02f13b9c18a24b29474cdf04dc544fcfbf8e6ac1f66eb848dbb943713acc22b1ef8af240a49c8e184f3eb7b67db49d20d23982f9e4258724726d96627245f28615c5caab4d4543f002cd377a41af6456db35db5f7a91a30b2a2c5a690d1b6351a7d89860b6fc44ae60c4f66af3c875b649e8d6cc19500430817020de5fd4533d2f530278f2c9124a1222bc5a41edd30347c8b11409a8821781b150813c96e5500d9647c9b5417206386cc085a29ded16de541b69f7b1d36355521e6303b4cbfc67ddf6d7f35a7fa6b4b5638dc549608c5bf0c9168f86b9f990a35f004473a3fac4db06315e448dd6e97db410589c8200aa2e352bff0a0fed3d084ed3588e669ee4c14d32fcb6b46d859599cf75cb1e6315771791666e085e2d117581ab4c52c799d8093f214b04225498388e3b76f2eed3d89b1769f9886941cecd8d847a71d904285154270293c686d5cbff3ff3481de06b83b7495cfad71722d06407ac5601e8faec86c4c404276d6d843f1ed2409899aee2df141f10897ec776e0e91a50be367ff1dd959648f02b13ae680553a41ca41da8dd330", 0x1000}], 0x9, &(0x7f0000000100)}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x2, &(0x7f0000002ac0))
accept$packet(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000015c0)=0x14)

23:59:07 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xddff}})

23:59:07 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x40020000]}, 0x6)

[ 1138.153496] binder: BINDER_SET_CONTEXT_MGR already set
[ 1138.168080] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1138.186757] binder: 7259:7267 ioctl 40046207 0 returned -16
23:59:07 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00Qh', @ANYRES16=r2, @ANYBLOB="000728bd7000ffdbdf2501000000080001004e230000"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:59:07 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x60000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:07 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xf3]}}}}, 0x48)

[ 1138.204941] binder_alloc: 7259: binder_alloc_buf, no vma
[ 1138.210632] binder: 7259:7283 transaction failed 29189/-3, size 64-8 line 2967
[ 1138.220880] binder: undelivered TRANSACTION_ERROR: 29201
[ 1138.234490] binder: undelivered TRANSACTION_ERROR: 29189
[ 1138.337649] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1138.372796] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:07 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x9}})

23:59:07 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x501840, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={<r3=>0x0, 0x45, "77ebec86d9233a398afd8476b27b175be2d4fb15ced32666879e8350ff077810b9b44fe9fe4aa356124133ac8119a144db2318d134bd9e7eac3feeed35f2a155b6bd50a06e"}, &(0x7f0000000140)=0x4d)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0xfffffffffffffffd, 0x10}, &(0x7f0000000300)=0xc)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e1e, 0x14cbc499, @empty, 0x100}, {0xa, 0x4e22, 0x4, @loopback={0x0, 0x1}, 0x3f}, 0x47, [0x80000000, 0x80000000, 0x0, 0x8, 0x100000000, 0x80000000, 0x10001, 0x800]}, 0x5c)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:07 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:07 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x6)

23:59:07 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xe4ffffff00000000]}}}}, 0x48)

23:59:07 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1000000000000000, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:07 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1f00000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:07 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x2]}}}}, 0x48)

[ 1138.904256] binder: 7333:7335 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:07 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x10000, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000100)=r3)

23:59:07 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x7002e}})

23:59:07 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x200000000000000]}, 0x6)

[ 1138.960497] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1138.963900] binder: 7333:7335 transaction failed 29201/-22, size 64-8 line 3030
[ 1139.017077] binder_alloc: binder_alloc_mmap_handler: 7333 20001000-20004000 already mapped failed -16
[ 1139.031631] binder: BINDER_SET_CONTEXT_MGR already set
[ 1139.056449] binder_alloc: 7333: binder_alloc_buf, no vma
23:59:07 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x3000000000000000]}}}}, 0x48)

23:59:07 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x20000000}})

[ 1139.062184] binder: 7333:7355 transaction failed 29189/-3, size 64-8 line 2967
[ 1139.093351] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1139.097160] binder: 7333:7335 ioctl 40046207 0 returned -16
[ 1139.121850] binder: undelivered TRANSACTION_ERROR: 29201
[ 1139.134103] binder: undelivered TRANSACTION_ERROR: 29189
23:59:08 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
sendfile(r0, r0, &(0x7f0000000080)=0x1000100, 0x800)

23:59:08 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_create(0x4)

23:59:08 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x100000000000000]}, 0x6)

23:59:08 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffff6, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:08 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x8500000000000000]}}}}, 0x48)

23:59:08 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x900}})

[ 1139.228415] binder: 7372:7374 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1139.266253] binder: 7372:7374 transaction failed 29201/-22, size 64-8 line 3030
23:59:08 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
read(r1, &(0x7f0000000080)=""/1, 0x229)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe)
ioctl$PIO_FONTX(r1, 0x5456, &(0x7f00000002c0))
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

[ 1139.286147] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1139.300506] binder_alloc: binder_alloc_mmap_handler: 7372 20001000-20004000 already mapped failed -16
[ 1139.328621] binder: BINDER_SET_CONTEXT_MGR already set
[ 1139.353906] binder_alloc: 7372: binder_alloc_buf, no vma
[ 1139.359572] binder: 7372:7397 transaction failed 29189/-3, size 64-8 line 2967
[ 1139.359632] binder: 7372:7374 ioctl 40046207 0 returned -16
[ 1139.382106] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1139.396784] binder: undelivered TRANSACTION_ERROR: 29189
[ 1139.404537] binder: undelivered TRANSACTION_ERROR: 29201
23:59:08 executing program 1:
r0 = epoll_create1(0x80000)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
socket$bt_hidp(0x1f, 0x3, 0x6)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:08 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000280))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
linkat(r2, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:08 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0xc9]}, 0x6)

23:59:08 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffffffff00000000}})

23:59:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x6000000]}}}}, 0x48)

23:59:08 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:08 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3002000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1139.804974] binder: 7401:7404 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1139.825536] binder: 7401:7404 transaction failed 29201/-22, size 64-8 line 3030
23:59:08 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x500000000000000}})

[ 1139.849207] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:08 executing program 4:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x400)
readahead(r0, 0x800, 0x6)
r1 = epoll_create1(0x0)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={<r3=>0x0, 0x1, 0x30}, &(0x7f0000000100)=0xc)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r3, 0x1ff}, 0x8)
setsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000280)="e4fc9f464e4cf303ab9ff25cac6c41affc0b0ee74fe8df56b60fb89b9d1205b0001ea1a6128d4ae78812b3a612e9ed05c6a405d0ee7110ea3761083543086dfb4efa9ee51661faf9a64c216ccc15a90d009a1ab88f8d46b2d73dd947bc6cde2ec42af116b7a11c6e7ce081a233a3be9b52e91fb8f2e6bd419eb29ff455049a4890f5c520389da66cbbef3238754d4a9a711941a3f1cef59d12adee2519dbd5f0045a111c77b89594827d42ba60aee3544068859683f7672c0bde5058e14585e95b52fe61378ae6e0f72bc6158abdac65d2f6f8cf47e16af5", 0xd8)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x15555555555555b9, 0x9)

23:59:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xfbffffff]}}}}, 0x48)

23:59:08 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xc900000000000000]}, 0x6)

[ 1139.895711] binder_alloc: binder_alloc_mmap_handler: 7401 20001000-20004000 already mapped failed -16
[ 1139.923254] binder: BINDER_SET_CONTEXT_MGR already set
23:59:08 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdeff0000}})

[ 1139.944945] binder: 7401:7404 ioctl 40046207 0 returned -16
[ 1139.954704] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1139.967753] binder_alloc: 7401: binder_alloc_buf, no vma
[ 1139.973589] binder: 7401:7423 transaction failed 29189/-3, size 64-8 line 2967
[ 1139.983394] binder: undelivered TRANSACTION_ERROR: 29201
[ 1139.990749] binder: undelivered TRANSACTION_ERROR: 29189
23:59:08 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:08 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
dup(r1)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x840, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0xc000]}}}}, 0x48)

[ 1140.046204] binder: 7439:7440 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1140.063590] binder: 7439:7440 transaction failed 29201/-22, size 64-8 line 3030
[ 1140.087572] binder_alloc: binder_alloc_mmap_handler: 7439 20001000-20004000 already mapped failed -16
[ 1140.100376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1140.106297] binder_alloc: 7439: binder_alloc_buf, no vma
[ 1140.112313] binder: 7439:7448 transaction failed 29189/-3, size 64-8 line 2967
[ 1140.120338] binder: 7439:7440 ioctl 40046207 0 returned -16
[ 1140.132916] binder: undelivered TRANSACTION_ERROR: 29201
[ 1140.140780] binder: undelivered TRANSACTION_ERROR: 29189
23:59:09 executing program 7:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0)
shutdown(r0, 0x1)

23:59:09 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:09 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4002000000000000]}, 0x6)

23:59:09 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:09 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdcff0000}})

23:59:09 executing program 4:
r0 = semget$private(0x0, 0x0, 0xf57db0219bf26ef5)
semctl$GETNCNT(r0, 0x7, 0xe, &(0x7f0000000340)=""/207)
r1 = epoll_create1(0x0)
r2 = timerfd_create(0x0, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{}, {}]})
ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f00000001c0)={0x66d9222a, 0x3a, 0xfffffffffffffff8})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000280)={0x9})
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
socketpair(0x5, 0x802, 0x5, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000002c0)={0x80000, 0x0, [0x3ff, 0x4, 0x4, 0x3, 0x78, 0x9, 0x6, 0x9]})
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000000c0)={r1})
epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:09 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x20000]}}}}, 0x48)

23:59:09 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1140.840361] QAT: Invalid ioctl
[ 1140.845777] binder: 7462:7465 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1140.846239] QAT: Invalid ioctl
[ 1140.877042] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1140.877042] 
23:59:09 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xffffff7f]}}}}, 0x48)

23:59:09 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xa000000]}, 0x6)

[ 1140.887546] binder: 7462:7465 transaction failed 29201/-22, size 64-8 line 3030
23:59:09 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3}})

[ 1140.922986] binder_alloc: binder_alloc_mmap_handler: 7462 20001000-20004000 already mapped failed -16
[ 1140.951226] QAT: Invalid ioctl
[ 1140.959049] QAT: Invalid ioctl
[ 1140.961364] binder: BINDER_SET_CONTEXT_MGR already set
[ 1140.970784] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1140.970784] 
[ 1140.977737] binder_alloc: 7462: binder_alloc_buf, no vma
[ 1140.987697] binder: 7462:7477 transaction failed 29189/-3, size 64-8 line 2967
23:59:09 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe8030000]}, 0x6)

23:59:09 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x852a6877, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:09 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf]}}}}, 0x48)

23:59:09 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff7f00000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:09 executing program 4:
r0 = epoll_create1(0x80000)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = fcntl$getown(r1, 0x9)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/mixer\x00', 0x50801, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000700)={'ah\x00'}, &(0x7f0000000740)=0x1e)
r4 = fcntl$getown(r0, 0x9)
kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r1, &(0x7f0000000180)={r0, r0, 0x9})
syz_open_dev$sndmidi(&(0x7f0000000540)='/dev/snd/midiC#D#\x00', 0x3f9e, 0x40)
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000100))
timerfd_settime(r1, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x9)
getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={<r6=>0xffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x5, 0x8, "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", 0x4e, 0x2, 0x807, 0x1, 0x2, 0x40008000, 0xff}, r6}}, 0x120)
write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x7, 0x5, "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", 0xd7, 0x7, 0x40, 0x7fffffff, 0x75fde64a, 0x1, 0xffff, 0x1}, r6}}, 0x120)
setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000600)=0x1, 0x4)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000640)={0x2, 0x0, [{0x7, 0x3, 0x0, 0x0, @sint={0x2, 0x10001}}, {0x1, 0x4, 0x0, 0x0, @sint={0x6, 0x5}}]})

[ 1141.017925] binder: 7462:7465 ioctl 40046207 0 returned -16
[ 1141.031925] binder: undelivered TRANSACTION_ERROR: 29201
[ 1141.039060] binder: undelivered TRANSACTION_ERROR: 29189
23:59:10 executing program 7:
r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0)
write(r0, &(0x7f0000000080)="a8", 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000317000), 0xff8)
syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1141.131793] binder: 7496:7498 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1141.165865] binder: 7496:7498 transaction failed 29201/-22, size 64-8 line 3030
[ 1141.190705] binder_alloc: binder_alloc_mmap_handler: 7496 20001000-20004000 already mapped failed -16
[ 1141.202359] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1141.212500] binder: BINDER_SET_CONTEXT_MGR already set
[ 1141.231460] binder_alloc: 7496: binder_alloc_buf, no vma
[ 1141.237090] binder: 7496:7511 transaction failed 29189/-3, size 64-8 line 2967
[ 1141.243160] binder: 7496:7498 ioctl 40046207 0 returned -16
[ 1141.274817] binder: undelivered TRANSACTION_ERROR: 29201
[ 1141.280889] binder: undelivered TRANSACTION_ERROR: 29189
[ 1141.319477] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:10 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f0000000100)=[{}], 0x155556b2, 0x9)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', 'proc+\x00'})
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001500)='/dev/audio\x00', 0x109000, 0x0)
ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000001540)={0xfff, 0x5})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000440)={0x2018})
r4 = fcntl$dupfd(r2, 0x403, r1)
clock_gettime(0x0, &(0x7f0000001440)={<r5=>0x0, <r6=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{&(0x7f0000000300)=@in={0x0, 0x0, @multicast1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000380)=""/147, 0x93}], 0x3, 0x0, 0x0, 0x1}, 0x1}, {{&(0x7f0000000580)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f0000000800)=""/94, 0x5e}, {&(0x7f0000000880)=""/33, 0x21}, {&(0x7f00000008c0)=""/209, 0xd1}], 0x5, &(0x7f0000000a40)=""/66, 0x42, 0x20}, 0x1}, {{&(0x7f0000000ac0)=@nl=@unspec, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b40)=""/115, 0x73}, {&(0x7f0000000bc0)=""/223, 0xdf}], 0x2, 0x0, 0x0, 0x3}, 0x2}, {{&(0x7f0000000d00)=@nl, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d80)=""/172, 0xac}, {&(0x7f0000000e40)=""/195, 0xc3}], 0x2, &(0x7f0000000f80)=""/184, 0xb8, 0x80000000}, 0x3}, {{&(0x7f0000001040)=@ll={0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/233, 0xe9}], 0x1, &(0x7f0000001200)=""/252, 0xfc, 0x5}, 0x200}], 0x5, 0x10122, &(0x7f0000001480)={r5, r6+30000000})
recvfrom$packet(r4, &(0x7f0000000280)=""/121, 0x79, 0x40, &(0x7f00000014c0)={0x11, 0xff, r7, 0x1, 0x950, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1d}}, 0x14)
fcntl$addseals(r2, 0x409, 0xd)

23:59:10 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x6}})

23:59:10 executing program 4:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x200)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), 0x4)
r2 = timerfd_create(0x0, 0x0)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x4, 0x401, 0x100000001, 0x2, 0x0, 0x2, 0x14000, 0x1, 0x3, 0x0, 0x0, 0x5, 0x7, 0x3, 0x7f4, 0x90d, 0x8, 0xfb6, 0x40, 0x1000, 0x1, 0xfffffffffffff17c, 0xfb, 0x8, 0x7, 0x3, 0x100, 0x5cd, 0x7, 0x2, 0x7ff, 0x0, 0x3, 0x401, 0x8, 0x6, 0x0, 0x200, 0x3, @perf_config_ext={0x9, 0x2}, 0x20, 0xd77a64e, 0x9, 0x0, 0x101, 0x74e, 0xdf}, r3, 0x5, r1, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:10 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x20000000000000]}}}}, 0x48)

23:59:10 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xf401]}, 0x6)

23:59:10 executing program 7:
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, 0x0, &(0x7f00000001c0)='.', 0x1)

23:59:10 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x852a6466, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:10 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdfc, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:10 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x8040)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0, <r2=>0x0}, &(0x7f0000001580)=0xc)
setfsgid(r2)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000200)=0x400, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x25c)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000240)="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")
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/anycast6\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='./file0\x00')
sendto$inet6(r3, &(0x7f0000000040)="312b2a3467b6466bf13efa14aae47d0d8567678be538f709d99b37fd35fa99e62010d4b7a8b4b354ae585a3445aa6760820c18bdc8ae1ec9926a2639aa2f4575d5400b65fb33708facb671567f98dc46e0e4d7a2f5699d1d9ea50779198ec2fad9ae3db7f111d41ea22d31d51bc31735987de34d986c03990a6a85bcb6a950", 0x7f, 0x4048044, &(0x7f0000000100)={0xa, 0x0, 0x3, @local={0xfe, 0x80, [], 0xaa}}, 0x1c)
getrandom(&(0x7f0000001240)=""/184, 0xfffffffffffffe1d, 0x2)
syz_open_dev$audion(&(0x7f0000001380)='/dev/audio#\x00', 0x7f, 0x8000)
r4 = semget(0x3, 0x3, 0x140)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000001300)=[0x1, 0x1])
ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001340))
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000013c0)={0x3, 0x100000000, 0xd3, 'queue0\x00', 0x100000001})
preadv(r3, &(0x7f0000001500)=[{&(0x7f0000002640)=""/4096, 0x1055}], 0x1f, 0x0)

[ 1142.001627] binder: 7526:7528 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:10 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf0ffffffffffff]}}}}, 0x48)

23:59:10 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
splice(r0, &(0x7f0000000000), r1, &(0x7f00000000c0), 0x0, 0x9)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:10 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1100]}, 0x6)

[ 1142.052192] binder: 7526:7528 transaction failed 29201/-22, size 64-8 line 3030
23:59:10 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffdf}})

23:59:11 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x9a1)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x900)
ioctl$RTC_UIE_OFF(r2, 0x7004)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

[ 1142.094888] binder_alloc: binder_alloc_mmap_handler: 7526 20001000-20004000 already mapped failed -16
[ 1142.109256] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1142.122447] binder: BINDER_SET_CONTEXT_MGR already set
[ 1142.137132] binder: 7526:7528 ioctl 40046207 0 returned -16
23:59:11 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x1200000000000000]}}}}, 0x48)

23:59:11 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x702bfd15)

[ 1142.191151] binder_alloc: 7526: binder_alloc_buf, no vma
[ 1142.197121] binder: 7526:7562 transaction failed 29189/-3, size 64-8 line 2967
[ 1142.226288] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:11 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x3e8]}, 0x6)

23:59:11 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffffffff87e00000}})

[ 1142.243372] binder: undelivered TRANSACTION_ERROR: 29189
[ 1142.250715] binder: undelivered TRANSACTION_ERROR: 29201
23:59:11 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:11 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:11 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x1000000]}}}}, 0x48)

23:59:11 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x40000000]}, 0x6)

23:59:11 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffffffffffff0700}})

[ 1142.350320] binder: 7578:7579 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1142.368592] binder: 7578:7579 transaction failed 29201/-22, size 64-8 line 3030
[ 1142.376420] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1142.397980] binder_alloc: binder_alloc_mmap_handler: 7578 20001000-20004000 already mapped failed -16
[ 1142.416098] binder: BINDER_SET_CONTEXT_MGR already set
[ 1142.431068] binder: 7578:7579 ioctl 40046207 0 returned -16
23:59:11 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xffffff7f00000000]}}}}, 0x48)

[ 1142.445962] binder_alloc: 7578: binder_alloc_buf, no vma
[ 1142.451799] binder: 7578:7586 transaction failed 29189/-3, size 64-8 line 2967
[ 1142.474517] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1142.482526] binder: undelivered TRANSACTION_ERROR: 29201
[ 1142.497236] binder: undelivered TRANSACTION_ERROR: 29189
23:59:11 executing program 7:
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @ext={0x0, &(0x7f0000000340)}}], 0x30)
link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00')
dup2(r0, r1)

23:59:11 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3f000000}})

23:59:11 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x7000000]}, 0x6)

23:59:11 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:11 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x700000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1143.088219] binder: 7611:7613 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1143.125112] binder: 7611:7613 transaction failed 29201/-22, size 64-8 line 3030
23:59:12 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
time(&(0x7f0000000100))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
timerfd_create(0x7, 0x800)

23:59:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x8000000]}}}}, 0x48)

23:59:12 executing program 4:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x20000)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={<r2=>0x0, @in6={{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x1e}, 0xee0}}}, &(0x7f0000000380)=0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x0, 0x2, 0x3, 0x1}, &(0x7f0000000480)=0x98)
r3 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080))
r4 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101e00, 0x0)
write$binfmt_elf32(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1fa363eda8f2621f7d0cb150c1ef3169f5b1bd62b91563549839c2abe9c73379912cd52043b48dfb08280d021891685fa9909af4f29d866b60d97da9a8fe5f32fd20858df80d3cf91ad21ed1d0bb2bffe283c6241342426be396cf1058eaaf7b0105c0"], 0x1)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r5, 0x0)
ioctl$int_in(r5, 0x800000c0045006, &(0x7f00000004c0)=0x100000035)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000140))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:12 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x20000]}, 0x6)

23:59:12 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x2e000700}})

[ 1143.143183] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1143.153386] binder_alloc: binder_alloc_mmap_handler: 7611 20001000-20004000 already mapped failed -16
[ 1143.164690] binder_alloc: 7611: binder_alloc_buf, no vma
[ 1143.165453] binder: BINDER_SET_CONTEXT_MGR already set
[ 1143.170305] binder: 7611:7622 transaction failed 29189/-3, size 64-8 line 2967
23:59:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xff00]}}}}, 0x48)

[ 1143.244348] Unknown ioctl -2147199535
[ 1143.249351] binder: 7611:7613 ioctl 40046207 0 returned -16
[ 1143.273756] binder: undelivered TRANSACTION_ERROR: 29189
[ 1143.281245] binder: undelivered TRANSACTION_ERROR: 29201
23:59:12 executing program 4:
r0 = epoll_create1(0x0)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getgroups(0x1, &(0x7f0000000100)=[r1])
r2 = timerfd_create(0x0, 0x0)
epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x65857198)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000140))
socket$pppoe(0x18, 0x1, 0x0)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:12 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x300]}, 0x6)

23:59:12 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffdc}})

23:59:12 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x3]}}}}, 0x48)

[ 1143.298520] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1143.366624] binder: 7647:7649 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1143.396129] binder: 7647:7649 transaction failed 29201/-22, size 64-8 line 3030
[ 1143.416784] binder_alloc: binder_alloc_mmap_handler: 7647 20001000-20004000 already mapped failed -16
[ 1143.440414] binder: BINDER_SET_CONTEXT_MGR already set
[ 1143.451364] binder: 7647:7649 ioctl 40046207 0 returned -16
[ 1143.457231] binder_alloc: 7647: binder_alloc_buf, no vma
[ 1143.457265] binder: 7647:7656 transaction failed 29189/-3, size 64-8 line 2967
[ 1143.474459] binder: undelivered TRANSACTION_ERROR: 29201
[ 1143.481578] binder: undelivered TRANSACTION_ERROR: 29189
23:59:12 executing program 7:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00')
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0)

23:59:12 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x88030000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:12 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xffffffff00000000]}, 0x6)

23:59:12 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x7ffffffffffff}})

23:59:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x47]}}}}, 0x48)

[ 1144.070402] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1144.111526] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:13 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000040045010, &(0x7f0000000000))
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/14)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xfffffffffffffffc)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/150, 0x96}], 0x1)
poll(&(0x7f0000000000), 0x0, 0xf93)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
inotify_init1(0x80800)

23:59:13 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:13 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x400000000000000]}}}}, 0x48)

23:59:13 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x400000000000000}})

23:59:13 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x240]}, 0x6)

23:59:13 executing program 7:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x41, 0x0)
write$binfmt_misc(r0, &(0x7f0000003780)={'syz1'}, 0x4)

[ 1144.175630] Unknown ioctl -2147199535
[ 1144.239404] binder: 7689:7692 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1144.269868] binder: 7689:7692 transaction failed 29201/-22, size 64-8 line 3030
[ 1144.312179] binder_alloc: binder_alloc_mmap_handler: 7689 20001000-20004000 already mapped failed -16
[ 1144.329295] binder: BINDER_SET_CONTEXT_MGR already set
[ 1144.335489] binder_alloc: 7689: binder_alloc_buf, no vma
[ 1144.341122] binder: 7689:7699 transaction failed 29189/-3, size 64-8 line 2967
[ 1144.349156] binder: 7689:7692 ioctl 40046207 0 returned -16
[ 1144.356660] binder: undelivered TRANSACTION_ERROR: 29201
[ 1144.363960] binder: undelivered TRANSACTION_ERROR: 29189
23:59:13 executing program 4:
r0 = epoll_create1(0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0xffff)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140))
ioctl$LOOP_SET_FD(r1, 0x4c00, r1)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r3=>0xffffffff}, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r3, 0x0, 0x0, @ib={0x1b, 0x6, 0x4, {"f27ddbc757fcbb33baf93ea918519ea7"}, 0x7, 0x9, 0x4ee81841}}}, 0x90)

23:59:13 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:13 executing program 7:

23:59:13 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd6ff000000000000}})

23:59:13 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x4800000000000000]}}}}, 0x48)

23:59:13 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x8]}, 0x6)

23:59:13 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:13 executing program 7:

[ 1144.557932] binder: 7703:7706 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:13 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x8500]}}}}, 0x48)

23:59:13 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe0ff0000}})

[ 1144.613490] binder: 7703:7706 transaction failed 29201/-22, size 64-8 line 3030
[ 1144.660276] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1144.677927] binder_alloc: binder_alloc_mmap_handler: 7703 20001000-20004000 already mapped failed -16
[ 1144.689092] binder: BINDER_SET_CONTEXT_MGR already set
[ 1144.695513] binder: 7703:7706 ioctl 40046207 0 returned -16
[ 1144.703663] binder_alloc: 7703: binder_alloc_buf, no vma
[ 1144.709357] binder: 7703:7725 transaction failed 29189/-3, size 64-8 line 2967
[ 1144.727762] binder: undelivered TRANSACTION_ERROR: 29201
[ 1144.740293] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1144.751310] binder: undelivered TRANSACTION_ERROR: 29189
23:59:14 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1b2, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:14 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xc9]}, 0x6)

23:59:14 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x183e00, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3})

23:59:14 executing program 7:

23:59:14 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xfbffffff]}}}}, 0x48)

23:59:14 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x2000000}})

23:59:14 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:14 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xec01, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:14 executing program 7:

[ 1145.463658] binder: 7735:7736 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:14 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x600100)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000000c0)=@dstopts={0x7f, 0x1, [], [@jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0xa7}, @ra={0x5, 0x2, 0x6}]}, 0x18)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0x4, 0x4)

23:59:14 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x700000000000000]}, 0x6)

23:59:14 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x9]}}}}, 0x48)

[ 1145.512558] binder: 7735:7736 transaction failed 29201/-22, size 64-8 line 3030
[ 1145.526167] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1145.549144] binder_alloc: binder_alloc_mmap_handler: 7735 20001000-20004000 already mapped failed -16
23:59:14 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd7ff0000}})

23:59:14 executing program 7:

[ 1145.578183] binder: BINDER_SET_CONTEXT_MGR already set
[ 1145.605781] binder: 7735:7736 ioctl 40046207 0 returned -16
23:59:14 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000080))

[ 1145.627659] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1145.640681] binder_alloc: 7735: binder_alloc_buf, no vma
[ 1145.646344] binder: 7735:7773 transaction failed 29189/-3, size 64-8 line 2967
23:59:14 executing program 7:
clock_gettime(0xa, &(0x7f00000002c0))

[ 1145.709326] binder: undelivered TRANSACTION_ERROR: 29201
[ 1145.717450] binder: undelivered TRANSACTION_ERROR: 29189
23:59:15 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
r2 = dup(r0)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@deltclass={0x12c, 0x29, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, r3, {0xbfcb4426e143c1dc}, {0x2, 0x4}, {0xd, 0xffff}}, [@TCA_RATE={0x8, 0x5, {0x40, 0xfff}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x5}}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x5, 0x25, 0xdeed, 0x2}, {0x3, 0x1, 0xffffffffffffeb72, 0x9, 0x2, 0x1}, 0x0, 0x0, 0x1f, 0x74d0, 0xff}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7}]}}, @TCA_RATE={0x8, 0x5, {0x401}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x24, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x8001, 0x6, 0x40}}, @TCA_HFSC_USC={0x10, 0x3, {0xa4, 0x6, 0x100000001}}]}}, @TCA_RATE={0x8, 0x5, {0x7fff}}, @TCA_RATE={0x8, 0x5, {0xff, 0xcf}}, @TCA_RATE={0x8, 0x5, {0x4, 0xa4}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x30, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x3}}, @TCA_ATM_HDR={0x14, 0x3, "183b9a7a4d99792a6056a6431150"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0xfff2}}]}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x9}}}]}, 0x12c}, 0x1}, 0x4081)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
write$P9_RMKDIR(r4, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x31, 0x2, 0x1}}, 0x14)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000500)={"b14b04d9cbb2f61d32f9cb3c0ab317fb43c61a79307e5216fd85794a8dd6907d7f307142c301fcc4f57faf3cf072510eccbedff31c6b2c557f9564ddaa82f8dc330154640445d2e139b0c5ba9492fb74f02b21f7dc987c655ea015b5dc9b3792b32c0ea0535d6bfa077726d47acaa1c5c13292666a014466fcd1e7fbe1a1eea7f510671cb8300e8b5d4ebb2769b6da9f1446701a16c8776ed5a844f12e5d86da54bb5ec55414cf5b23c52cbc7177eca5789476b7977cf69d01e499d398a471f79d11d3a9be1155b43930178c403ffb8b314784753d907108d82b96e937789cef73369256f7bf89dda9e738ee1f0b55c7ce9fa2cc3665962b413ad7906ba429ae9c8e0a2fb3497f03b88c85950ef61595004fee69ae1470d4a8a14e21e1319811a3f262a5aaf7cdaa117cbe64c674c4774bff452623123f68f0be8c1c139f51b902c25feab3eca7dbdeeeb94df2fe5867cad080a06f591cf8d21f607e129117e964042218f5d29e81b13e4859c2c1d6903fc0ae945d25666814aed7394de0502790e846a29cafd4a50aaeb038744934f1d72346741f2052a5df7c67a450833c6d34523be3bb46dd119ca4392905cf9e785f106fecf4c75b6d858ebceea16ec12518e516bfeccfa9d03f7ac9075f314f1d23b0a4be70d12eb9fb8709e430d005a6bd0fa1cc32dd55bdf3964534c5c69523f976bf0c23ec785f00a387cfc8727cb8c765073cb3817e437379236ca034747ad6c4541c27b3d06babf17e6defad3256fe5c67290428620a4ed202a5c82542e94f4bd45d732d9c7553f840da7699bff8b1dbdb342d921f5934114285a76f64b1f689e30c13c4cb39e72fe8f594355809b3cea94b5366764ef19d5b6a32298d5bb07f7e539747e89b062b88d530523f56c0b10271965ae95be8c4ebc7ab9fee1ce66fdc630dc805543b6e8c5bbb6c2667f32b874bbaf2028c55a436fb364cf72d995649187c37ac3cb2b15915c53d6252a56eb1c34a5fc162e5ab6237b842338357ab4c81c13036a5a22775aaa94dd8442e8acd5cee7f5c8b08b6af729b0a6f1aed2e2ab895aa4c2b65388773914ba0eade583b1421f3479c252c60f846b518f44c3e1c9eb9a91f80270d4dbc10122b118ca96e132e7c68099bc37ebeacea38649d82d2a5b975313b35e5bc391d6414b61fe1a1cb1cfc0b455d8ce760e5cc608e9754a8119ac3be61930ba1ad2ad11e004001b8965693c784c66dc5f6eba9ca5859a1385760c43b1ff03fbf3d9ccb3b304e1325284a64f2fa18c58f4f49f5ca8a5606d72683d6c3da1974e0fe66fd58f0de455a904fb5a4e442f4bc7e5a13d4f13773ccf7a4d6ebd4acb523498d4e365c31bc6e3fea1bb95e7afa0b1cd79bcda11253020ee8b0c8d611bce5b017086ac46c9e4de93096d54054535feaf4dd3fb06875ffed7c41243b086f5afff5d778a4"})

23:59:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x48]}}}}, 0x48)

23:59:15 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffdb}})

23:59:15 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:15 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x14280000000000]}, 0x6)

23:59:15 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0)})

23:59:15 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:15 executing program 7:

23:59:15 executing program 7:

[ 1146.385614] binder: 7787:7789 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1146.415506] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1146.415506] 
23:59:15 executing program 4:

23:59:15 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffd7}})

23:59:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xfffffffb]}}}}, 0x48)

[ 1146.431102] binder: 7787:7789 transaction failed 29201/-22, size 64-8 line 3030
[ 1146.453263] binder_alloc: binder_alloc_mmap_handler: 7787 20001000-20004000 already mapped failed -16
23:59:15 executing program 4:

23:59:15 executing program 7:

23:59:15 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe00000000000000]}, 0x6)

[ 1146.487286] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1146.487286] 
[ 1146.496032] binder: BINDER_SET_CONTEXT_MGR already set
[ 1146.525598] binder_alloc: 7787: binder_alloc_buf, no vma
23:59:15 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:15 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe087ffffffff}})

[ 1146.531257] binder: 7787:7804 transaction failed 29189/-3, size 64-8 line 2967
23:59:15 executing program 4:

23:59:15 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x68, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:15 executing program 7:

23:59:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xff01000000000000]}}}}, 0x48)

[ 1146.595098] binder: 7787:7789 ioctl 40046207 0 returned -16
[ 1146.626686] binder: undelivered TRANSACTION_ERROR: 29201
[ 1146.634837] binder: undelivered TRANSACTION_ERROR: 29189
23:59:15 executing program 4:

23:59:15 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x8561646600000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:15 executing program 7:

23:59:15 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x11000000]}, 0x6)

[ 1146.651689] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:15 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x2f66696c00000000}})

23:59:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x85000000]}}}}, 0x48)

23:59:15 executing program 4:

23:59:15 executing program 7:

[ 1146.704510] binder: 7837:7838 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1146.728620] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1146.738693] binder: 7837:7838 transaction failed 29201/-22, size 64-8 line 3030
23:59:15 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xec01000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:15 executing program 7:

[ 1146.769792] binder_alloc: binder_alloc_mmap_handler: 7837 20001000-20004000 already mapped failed -16
[ 1146.798443] binder: BINDER_SET_CONTEXT_MGR already set
[ 1146.823498] binder_alloc: 7837: binder_alloc_buf, no vma
[ 1146.829201] binder: 7837:7854 transaction failed 29189/-3, size 64-8 line 2967
[ 1146.833899] binder: 7837:7838 ioctl 40046207 0 returned -16
[ 1146.885816] binder: undelivered TRANSACTION_ERROR: 29189
[ 1146.894326] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1146.911821] binder: undelivered TRANSACTION_ERROR: 29201
[ 1146.934193] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:16 executing program 1:
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0x10})
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140))
r3 = epoll_create1(0x0)
r4 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080))
epoll_wait(r3, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800)
ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f00000000c0))
epoll_wait(r3, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000440)={0x7})

23:59:16 executing program 4:

23:59:16 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x97ffffff}})

23:59:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xffcb]}, 0x6)

23:59:16 executing program 7:

23:59:16 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xff010000]}}}}, 0x48)

23:59:16 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x852a6277, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:16 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfcfdffff00000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:16 executing program 7:

23:59:16 executing program 4:

[ 1147.520766] binder: 7873:7876 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xeffe]}, 0x6)

23:59:16 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf3000000]}}}}, 0x48)

[ 1147.569660] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1147.579503] binder: 7873:7876 transaction failed 29201/-22, size 64-8 line 3030
23:59:16 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe2ff}})

23:59:16 executing program 7:

23:59:16 executing program 4:

23:59:16 executing program 4:

[ 1147.624435] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1147.643803] binder_alloc: binder_alloc_mmap_handler: 7873 20001000-20004000 already mapped failed -16
[ 1147.680752] binder: BINDER_SET_CONTEXT_MGR already set
[ 1147.688935] binder: 7873:7876 ioctl 40046207 0 returned -16
[ 1147.708300] binder_alloc: 7873: binder_alloc_buf, no vma
[ 1147.713978] binder: 7873:7901 transaction failed 29189/-3, size 64-8 line 2967
[ 1147.775335] binder: undelivered TRANSACTION_ERROR: 29201
[ 1147.782116] binder: undelivered TRANSACTION_ERROR: 29189
23:59:17 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'system.', 'ppp1systemeth0+GPLnodevproc\x00'}, &(0x7f0000000300)=""/149, 0x95)

23:59:17 executing program 7:

23:59:17 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x48000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:17 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x900]}, 0x6)

23:59:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x4000]}}}}, 0x48)

23:59:17 executing program 4:

23:59:17 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd6ff}})

23:59:17 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:17 executing program 4:

23:59:17 executing program 7:

23:59:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x2]}}}}, 0x48)

[ 1148.613277] binder: 7907:7909 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:17 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe00]}, 0x6)

23:59:17 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdfff000000000000}})

23:59:17 executing program 7:

[ 1148.672150] binder: 7907:7909 transaction failed 29201/-22, size 64-8 line 3030
[ 1148.676186] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:17 executing program 4:

23:59:17 executing program 7:

[ 1148.722118] binder_alloc: binder_alloc_mmap_handler: 7907 20001000-20004000 already mapped failed -16
[ 1148.769974] binder: BINDER_SET_CONTEXT_MGR already set
[ 1148.791317] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1148.801881] binder: 7907:7909 ioctl 40046207 0 returned -16
[ 1148.815928] binder_alloc: 7907: binder_alloc_buf, no vma
[ 1148.821882] binder: 7907:7927 transaction failed 29189/-3, size 64-8 line 2967
[ 1148.847646] binder: undelivered TRANSACTION_ERROR: 29189
[ 1148.861670] binder: undelivered TRANSACTION_ERROR: 29201
23:59:18 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x11})
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:18 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x4]}}}}, 0x48)

23:59:18 executing program 4:

23:59:18 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x2000000000000000}})

23:59:18 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1000000]}, 0x6)

23:59:18 executing program 7:

23:59:18 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:18 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:18 executing program 4:

23:59:18 executing program 7:

[ 1149.642745] binder: 7947:7949 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1149.659235] binder: 7947:7949 transaction failed 29201/-22, size 64-8 line 3030
23:59:18 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x6]}}}}, 0x48)

23:59:18 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x7}})

[ 1149.700393] binder_alloc: binder_alloc_mmap_handler: 7947 20001000-20004000 already mapped failed -16
[ 1149.729032] binder: BINDER_SET_CONTEXT_MGR already set
23:59:18 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e0000002ac141412000000000000000000e000000200000000e000000100000000e0000001ac1414aaac1414aa"], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff}, 0xc)

23:59:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4038ae7a, &(0x7f0000000200))

23:59:18 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4000000000000000]}, 0x6)

[ 1149.747580] binder: 7947:7949 ioctl 40046207 0 returned -16
[ 1149.755844] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1149.783743] binder_alloc: 7947: binder_alloc_buf, no vma
[ 1149.789685] binder: 7947:7970 transaction failed 29189/-3, size 64-8 line 2967
23:59:18 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x4000000000000]}}}}, 0x48)

[ 1149.855350] binder: undelivered TRANSACTION_ERROR: 29201
[ 1149.863532] binder: undelivered TRANSACTION_ERROR: 29189
[ 1149.891929] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:19 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x129100, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, r2, 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffffffffff01, 0x0)
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000300)={{0x8, 0x885}, 0x10}, 0x10)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000380)={<r4=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000003c0)={r4})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x600})
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x5)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:19 executing program 7:
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0xff4f}, 0x0)
shutdown(r0, 0x1)

23:59:19 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x971}})

23:59:19 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4)

23:59:19 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x66646185, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:19 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x2800]}, 0x6)

23:59:19 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x200000000000000]}}}}, 0x48)

23:59:19 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xec010000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:19 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4)

[ 1150.752718] binder: 7994:7995 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1150.781988] binder: 7994:7995 transaction failed 29201/-22, size 64-8 line 3030
23:59:19 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x2800000000000000]}, 0x6)

23:59:19 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x3000]}}}}, 0x48)

[ 1150.815977] binder_alloc: binder_alloc_mmap_handler: 7994 20001000-20004000 already mapped failed -16
[ 1150.842333] binder: BINDER_SET_CONTEXT_MGR already set
[ 1150.856151] binder_alloc: 7994: binder_alloc_buf, no vma
23:59:19 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffdd}})

23:59:19 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10)

[ 1150.861884] binder: 7994:8015 transaction failed 29189/-3, size 64-8 line 2967
[ 1150.871560] binder: 7994:7995 ioctl 40046207 0 returned -16
[ 1150.879232] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1150.901351] binder: undelivered TRANSACTION_ERROR: 29201
23:59:19 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:19 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xfffffffe]}, 0x6)

[ 1150.911271] binder: undelivered TRANSACTION_ERROR: 29189
23:59:19 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x85]}}}}, 0x48)

[ 1150.956393] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1151.000697] binder: 8033:8034 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1151.046256] binder: 8033:8034 transaction failed 29201/-22, size 64-8 line 3030
[ 1151.060268] binder_alloc: binder_alloc_mmap_handler: 8033 20001000-20004000 already mapped failed -16
[ 1151.075467] binder: BINDER_SET_CONTEXT_MGR already set
[ 1151.083533] binder: 8033:8034 ioctl 40046207 0 returned -16
[ 1151.092930] binder_alloc: 8033: binder_alloc_buf, no vma
[ 1151.098638] binder: 8033:8042 transaction failed 29189/-3, size 64-8 line 2967
[ 1151.107930] binder: undelivered TRANSACTION_ERROR: 29201
[ 1151.114371] binder: undelivered TRANSACTION_ERROR: 29189
23:59:20 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x0, 0x0)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000140)={0x9, 0x8, 0xff})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000300))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='&md5sum\x00', r2}, 0x10)
ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f00000000c0)={0x8, 0x9, 0x7fff, 0x200})

23:59:20 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x600, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:20 executing program 4:
clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000))
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
pread64(r0, &(0x7f00009f3000), 0x352, 0x0)
lseek(r0, 0x0, 0x0)
open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0)

23:59:20 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfffffff0}})

23:59:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x4700000000000000]}}}}, 0x48)

23:59:20 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xfeef]}, 0x6)

23:59:20 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:20 executing program 7:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10)
recvfrom$inet(r0, &(0x7f0000000600)=""/208, 0xd0, 0x0, &(0x7f0000000700)={0x2, 0x0, @multicast1=0xe0000001}, 0x701000)

[ 1151.679594] binder: 8055:8056 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1151.705201] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1151.713361] binder: 8055:8056 transaction failed 29201/-22, size 64-8 line 3030
23:59:20 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x100000000000000]}, 0x6)

23:59:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x5532020000000000]}}}}, 0x48)

23:59:20 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf4ffffff}})

[ 1151.729702] binder_alloc: binder_alloc_mmap_handler: 8055 20001000-20004000 already mapped failed -16
[ 1151.761498] binder: BINDER_SET_CONTEXT_MGR already set
23:59:20 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x48, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xffff000000000000]}}}}, 0x48)

23:59:20 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x6000000}})

[ 1151.776363] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1151.789570] binder_alloc: 8055: binder_alloc_buf, no vma
[ 1151.792992] binder: 8055:8056 ioctl 40046207 0 returned -16
[ 1151.795179] binder: 8055:8081 transaction failed 29189/-3, size 64-8 line 2967
23:59:20 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x8055]}, 0x6)

23:59:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x9000000]}}}}, 0x48)

[ 1151.881445] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1151.882791] binder: undelivered TRANSACTION_ERROR: 29189
[ 1151.907964] binder: undelivered TRANSACTION_ERROR: 29201
[ 1151.967098] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:21 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2})
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000140)={0x20000000})
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
r2 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000100)={0x11, 0xd, r3, 0x1, 0x80fe, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0x14)

23:59:21 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:21 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x8000000}})

23:59:21 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x9]}, 0x6)

23:59:21 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1301000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x800800000000]}}}}, 0x48)

23:59:21 executing program 4:
clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000))
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
pread64(r0, &(0x7f00009f3000), 0x352, 0x0)
lseek(r0, 0x0, 0x0)
open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0)

23:59:21 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x4000000000000000]}}}}, 0x48)

[ 1152.671899] binder: 8124:8125 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1152.695539] binder: BINDER_SET_CONTEXT_MGR already set
23:59:21 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfffffff6}})

23:59:21 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xfeffffff00000000]}, 0x6)

[ 1152.728184] binder: 8124:8125 transaction failed 29201/-22, size 64-8 line 3030
[ 1152.754798] binder: 8119:8123 ioctl 40046207 0 returned -16
[ 1152.756820] binder: undelivered TRANSACTION_ERROR: 29201
23:59:21 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd9ff}})

[ 1152.790836] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1152.804749] binder: 8119:8123 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:21 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffd9}})

23:59:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x10000000]}}}}, 0x48)

23:59:21 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x800000000000000]}, 0x6)

23:59:21 executing program 7:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x1, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340)=<r6=>0x0)
fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getgroups(0x3, &(0x7f0000000400)=[0xffffffffffffffff, <r8=>0xee00, 0xffffffffffffffff])
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000800)={0xa0002000})
ioctl$FICLONE(r3, 0x40049409, r2)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000680)={0x7b, 0x0, [0xb074ef1, 0x2, 0x3fa, 0x1e2]})
getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000700)=""/132, &(0x7f00000007c0)=0x84)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
getgroups(0x8, &(0x7f0000000640)=[r4, r5, r6, r7, r8, r9, r10, r11])
write$binfmt_aout(r3, &(0x7f0000000840)={{0x108, 0x0, 0x75, 0x24d, 0xfffffffffffffff9, 0x2482, 0x90, 0x2}, "501054a6038e57f8a88a48d2e464ef8e18e498b26540f1118feb577b0b1da24e2d442de3852fbc217e3011f0e9b7d89129c8dca4fbcec78ed4b3740a310b2de5fa0037d3e04e47ad8c0180ce6aa6e53945f8f2ab92632a763a5a1da725618862cd1e6f4ff4b3917d0b96bb561893a30f43d8d0b11d669d0fe93940c405ad44cab7fa4f49894b9ae5dbcb6199fbfdc332362f42fe972fbb384a534995508f898c53ecbe9485aaec04e385de9cbced6f4795e8dc67a0c10fe5c2619bcfc215ad65e395597f"}, 0xe4)

[ 1152.891847] binder: 8119:8123 transaction failed 29201/-22, size 64-8 line 3030
[ 1152.923194] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1152.937857] binder_alloc: binder_alloc_mmap_handler: 8119 20001000-20004000 already mapped failed -16
[ 1152.959431] binder_alloc: 8119: binder_alloc_buf, no vma
[ 1152.965145] binder: 8119:8154 transaction failed 29189/-3, size 64-8 line 2967
[ 1153.016673] binder: undelivered TRANSACTION_ERROR: 29201
[ 1153.022669] binder: undelivered TRANSACTION_ERROR: 29189
23:59:22 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe4ffffff00000000}})

23:59:22 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xc000000]}}}}, 0x48)

23:59:22 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3002, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:22 executing program 7:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x1, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340)=<r6=>0x0)
fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getgroups(0x3, &(0x7f0000000400)=[0xffffffffffffffff, <r8=>0xee00, 0xffffffffffffffff])
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000800)={0xa0002000})
ioctl$FICLONE(r3, 0x40049409, r2)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000680)={0x7b, 0x0, [0xb074ef1, 0x2, 0x3fa, 0x1e2]})
getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000700)=""/132, &(0x7f00000007c0)=0x84)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
getgroups(0x8, &(0x7f0000000640)=[r4, r5, r6, r7, r8, r9, r10, r11])
write$binfmt_aout(r3, &(0x7f0000000840)={{0x108, 0x0, 0x75, 0x24d, 0xfffffffffffffff9, 0x2482, 0x90, 0x2}, "501054a6038e57f8a88a48d2e464ef8e18e498b26540f1118feb577b0b1da24e2d442de3852fbc217e3011f0e9b7d89129c8dca4fbcec78ed4b3740a310b2de5fa0037d3e04e47ad8c0180ce6aa6e53945f8f2ab92632a763a5a1da725618862cd1e6f4ff4b3917d0b96bb561893a30f43d8d0b11d669d0fe93940c405ad44cab7fa4f49894b9ae5dbcb6199fbfdc332362f42fe972fbb384a534995508f898c53ecbe9485aaec04e385de9cbced6f4795e8dc67a0c10fe5c2619bcfc215ad65e395597f"}, 0xe4)

23:59:22 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x40100, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[{0x6, 0x6}], 0x1)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)=""/63)
ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x81)

23:59:22 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:22 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe000000]}, 0x6)

23:59:22 executing program 4:
clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000))
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
pread64(r0, &(0x7f00009f3000), 0x352, 0x0)
lseek(r0, 0x0, 0x0)
open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0)

23:59:22 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x10000000000000]}}}}, 0x48)

23:59:22 executing program 7:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x1, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340)=<r6=>0x0)
fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getgroups(0x3, &(0x7f0000000400)=[0xffffffffffffffff, <r8=>0xee00, 0xffffffffffffffff])
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000800)={0xa0002000})
ioctl$FICLONE(r3, 0x40049409, r2)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000680)={0x7b, 0x0, [0xb074ef1, 0x2, 0x3fa, 0x1e2]})
getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000700)=""/132, &(0x7f00000007c0)=0x84)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
getgroups(0x8, &(0x7f0000000640)=[r4, r5, r6, r7, r8, r9, r10, r11])
write$binfmt_aout(r3, &(0x7f0000000840)={{0x108, 0x0, 0x75, 0x24d, 0xfffffffffffffff9, 0x2482, 0x90, 0x2}, "501054a6038e57f8a88a48d2e464ef8e18e498b26540f1118feb577b0b1da24e2d442de3852fbc217e3011f0e9b7d89129c8dca4fbcec78ed4b3740a310b2de5fa0037d3e04e47ad8c0180ce6aa6e53945f8f2ab92632a763a5a1da725618862cd1e6f4ff4b3917d0b96bb561893a30f43d8d0b11d669d0fe93940c405ad44cab7fa4f49894b9ae5dbcb6199fbfdc332362f42fe972fbb384a534995508f898c53ecbe9485aaec04e385de9cbced6f4795e8dc67a0c10fe5c2619bcfc215ad65e395597f"}, 0xe4)

[ 1153.641356] binder: 8171:8176 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1153.679267] binder: 8171:8176 transaction failed 29201/-22, size 64-8 line 3030
23:59:22 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x300000000000000}})

23:59:22 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xfeffffff]}, 0x6)

[ 1153.705746] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1153.717227] binder_alloc: binder_alloc_mmap_handler: 8171 20001000-20004000 already mapped failed -16
[ 1153.745753] binder: BINDER_SET_CONTEXT_MGR already set
23:59:22 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf4ffffff00000000]}}}}, 0x48)

23:59:22 executing program 7:
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r1=>0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x2, 0x2, @tid=r1}, &(0x7f0000000180))
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r2 = getpid()
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0)
read(r3, &(0x7f00000001c0)=""/71, 0x47)
sched_setattr(r2, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmsg$alg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="7ace8dea2813534b0e0737b80e06978877bf233e2754011f7b676db3a032ee6fd6b66edb8484fa4021f7f45052e07ec39c4946bc681eadca98b2432603a50a91e1642b0f3f4ad9a562d0542b434a694731183b68ba899fffb6d5d8f1aa2eb4fb525fd26ba7a7e1cf393aa58f9895d2f67fe2238af14649d6c32c5e50e06834e6ae251a407c8bea97c74e86de3e7e357837bc47ff12914dad720f5bb1eac1a5f0881b29d1a738edd10f75e43151252899e081f9b63c833886c907d516bcb754c82367b6cb43c3cb8df90176c1f317790c40f0671efc20f97533", 0xd9}, {&(0x7f00000002c0)="b1cf478b8ae41cf4e8da6fd1e71410ad0777e9d803fbfc34f8204a7ed0204e", 0x1f}, {&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000000400)="e16d2ca421edfec26c53b0f04a1a00c0c4827a61d88298d6f05ee0047e3a576af8f4a3deeef0aad5d567960cfe8ccf7f24b671b84fc752dda1e1c82f265b212717514dd435f5410b71327ae88af17a43d4f7cdccb2a337ed595a6e02ce6994cc8484aceb2497d6ebf453c23c14ddbd5b88dcea5e216e79bc22a17c47fed403992d2f19abff0e4293d3f16a0e294a0f6548b6219069a86137973cdd2d9a065e63a8551c3d15558c1998a2358d4379c29f298ee1e652e05eabb6ced892dda44595b83fdf37a6ec452e985f3b60aea0566c2654737c141b8967a5bb35726a", 0xdd}, {&(0x7f0000000500)="74223b27d42e761b8eaa3a0bb41124b0a9cb21e0784240d7036c70c8e9e86b331c2c7ea92cf9e01812ae8e18f0f70452c40e3393553e016ef778a9d7e87714", 0x3f}], 0x5, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4}, @assoc={0x18, 0x117, 0x4, 0xfff}], 0x30, 0x4000051}, 0x20000000)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r0, &(0x7f0000002940), 0x4d6, 0x0, &(0x7f0000002ac0))

[ 1153.763267] binder: 8171:8176 ioctl 40046207 0 returned -16
[ 1153.800100] binder_alloc: 8171: binder_alloc_buf, no vma
[ 1153.805937] binder: 8171:8196 transaction failed 29189/-3, size 64-8 line 2967
23:59:22 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x300}})

23:59:22 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x700]}, 0x6)

[ 1153.814701] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:22 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xfffff000]}}}}, 0x48)

[ 1153.869585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
23:59:22 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x300, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1153.910524] binder: undelivered TRANSACTION_ERROR: 29189
[ 1153.925090] binder: undelivered TRANSACTION_ERROR: 29201
23:59:22 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:22 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdeff}})

[ 1154.044656] binder: 8215:8216 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1154.069111] binder: 8215:8216 transaction failed 29201/-22, size 64-8 line 3030
[ 1154.103853] binder_alloc: binder_alloc_mmap_handler: 8215 20001000-20004000 already mapped failed -16
[ 1154.115140] binder: BINDER_SET_CONTEXT_MGR already set
[ 1154.124841] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1154.127051] binder: 8215:8216 ioctl 40046207 0 returned -16
[ 1154.136477] binder_alloc: 8215: binder_alloc_buf, no vma
[ 1154.146846] binder: 8215:8221 transaction failed 29189/-3, size 64-8 line 2967
[ 1154.179387] binder: undelivered TRANSACTION_ERROR: 29189
[ 1154.190177] binder: undelivered TRANSACTION_ERROR: 29201
[ 1154.197583] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:23 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2})
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:23 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xff0f0000]}}}}, 0x48)

23:59:23 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:23 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x7]}, 0x6)

23:59:23 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x10}})

23:59:23 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x77622a85, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:23 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4403000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:23 executing program 4:
clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000))
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
pread64(r0, &(0x7f00009f3000), 0x352, 0x0)
lseek(r0, 0x0, 0x0)
open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0)

[ 1154.700778] binder: 8230:8234 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1154.710008] binder: BINDER_SET_CONTEXT_MGR already set
23:59:23 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x47000000]}}}}, 0x48)

23:59:23 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffe0}})

23:59:23 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xeffe0000]}, 0x6)

[ 1154.743275] binder: 8236:8237 ioctl 40046207 0 returned -16
[ 1154.756495] binder: 8230:8234 transaction failed 29201/-22, size 64-8 line 3030
[ 1154.765454] binder: 8236:8237 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1154.775954] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:23 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3c000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1154.797192] binder: undelivered TRANSACTION_ERROR: 29201
[ 1154.817351] binder: 8236:8237 transaction failed 29201/-22, size 64-8 line 3030
[ 1154.830965] binder_alloc: binder_alloc_mmap_handler: 8236 20001000-20004000 already mapped failed -16
23:59:23 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf000]}}}}, 0x48)

23:59:23 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x600000000000000}})

[ 1154.856831] binder_alloc: 8236: binder_alloc_buf, no vma
[ 1154.862472] binder: 8236:8257 transaction failed 29189/-3, size 64-8 line 2967
[ 1154.881407] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1154.887037] binder: BINDER_SET_CONTEXT_MGR already set
[ 1154.896776] binder: undelivered TRANSACTION_ERROR: 29201
23:59:23 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:23 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4000000]}, 0x6)

[ 1154.912127] binder: undelivered TRANSACTION_ERROR: 29189
[ 1154.936772] binder: 8263:8265 ioctl 40046207 0 returned -16
[ 1154.973356] binder: 8263:8265 transaction failed 29189/-22, size 64-8 line 2852
[ 1154.980247] binder: 8275:8277 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1155.001719] binder: undelivered TRANSACTION_ERROR: 29189
[ 1155.006196] binder: 8275:8277 transaction failed 29201/-22, size 64-8 line 3030
[ 1155.017300] binder_alloc: binder_alloc_mmap_handler: 8275 20001000-20004000 already mapped failed -16
[ 1155.036739] binder: BINDER_SET_CONTEXT_MGR already set
[ 1155.042197] binder_alloc: 8275: binder_alloc_buf, no vma
[ 1155.046150] binder: 8275:8277 ioctl 40046207 0 returned -16
[ 1155.047840] binder: 8275:8279 transaction failed 29189/-3, size 64-8 line 2967
[ 1155.063707] binder: undelivered TRANSACTION_ERROR: 29201
[ 1155.070726] binder: undelivered TRANSACTION_ERROR: 29189
23:59:24 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x404000)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20400, 0x0)
ioctl$TCXONC(r2, 0x540a, 0xff)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:24 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfeffffff, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:24 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1000000000000}})

23:59:24 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xc000]}}}}, 0x48)

23:59:24 executing program 7:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7, 0x1000000})

23:59:24 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x14000000]}, 0x6)

23:59:24 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3c00, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1155.660120] binder: 8282:8283 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1155.694193] binder: 8282:8283 transaction failed 29201/-22, size 64-8 line 3030
[ 1155.701982] binder: BINDER_SET_CONTEXT_MGR already set
23:59:24 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf300]}}}}, 0x48)

23:59:24 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x80550000]}, 0x6)

23:59:24 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd6ff0000}})

[ 1155.724625] binder: 8294:8295 ioctl 40046207 0 returned -16
[ 1155.738273] binder_alloc: binder_alloc_mmap_handler: 8282 20001000-20004000 already mapped failed -16
[ 1155.751994] binder_alloc: 8282: binder_alloc_buf, no vma
[ 1155.757675] binder: 8294:8295 transaction failed 29189/-3, size 64-8 line 2967
[ 1155.761579] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1155.769025] binder: BINDER_SET_CONTEXT_MGR already set
[ 1155.795976] binder: 8282:8283 ioctl 40046207 0 returned -16
[ 1155.805818] binder: undelivered TRANSACTION_ERROR: 29189
[ 1155.816171] binder_alloc: 8282: binder_alloc_buf, no vma
23:59:24 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x500000000000000]}}}}, 0x48)

[ 1155.821795] binder: 8282:8312 transaction failed 29189/-3, size 64-8 line 2967
23:59:24 executing program 4:
r0 = getpgid(0x0)
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000002840)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000002ac0))

23:59:24 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdbff}})

23:59:24 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x5580]}, 0x6)

23:59:24 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1155.853468] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1155.868732] binder: undelivered TRANSACTION_ERROR: 29189
[ 1155.874458] binder: undelivered TRANSACTION_ERROR: 29201
[ 1155.958711] binder: 8325:8327 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1155.974292] binder: 8325:8327 transaction failed 29201/-22, size 64-8 line 3030
[ 1155.983615] binder_alloc: binder_alloc_mmap_handler: 8325 20001000-20004000 already mapped failed -16
[ 1156.000633] binder: BINDER_SET_CONTEXT_MGR already set
[ 1156.011577] binder: 8325:8327 ioctl 40046207 0 returned -16
[ 1156.021004] binder_alloc: 8325: binder_alloc_buf, no vma
[ 1156.026711] binder: 8325:8330 transaction failed 29189/-3, size 64-8 line 2967
[ 1156.041034] binder: undelivered TRANSACTION_ERROR: 29201
[ 1156.047389] binder: undelivered TRANSACTION_ERROR: 29189
23:59:25 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = dup3(r0, r1, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xd55d, 0x400000)
ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f00000000c0))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000100)={0x464, 0x1, 0x9, 0x1f, "8a6926e7de6f7cff6098932c39e3b4a3b5259aaa800a24cc4b090eef88ef8e37"})
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:25 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf0]}}}}, 0x48)

23:59:25 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:25 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffd6}})

23:59:25 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4]}, 0x6)

23:59:25 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:25 executing program 7:
r0 = epoll_create1(0x80007fffe)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={<r3=>0xffffffff}, 0x8d65629d0263b4b, 0xd}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0xfcd5)
clock_gettime(0x0, &(0x7f0000000300)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000000340))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:25 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x500]}}}}, 0x48)

23:59:25 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe803000000000000]}, 0x6)

[ 1156.684108] binder: 8339:8342 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1156.698167] binder: 8339:8342 transaction failed 29201/-22, size 64-8 line 3030
23:59:25 executing program 7:
r0 = epoll_create1(0x80007fffe)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={<r3=>0xffffffff}, 0x8d65629d0263b4b, 0xd}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0xfcd5)
clock_gettime(0x0, &(0x7f0000000300)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000000340))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)

23:59:25 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x7109000000000000}})

[ 1156.750588] binder: BINDER_SET_CONTEXT_MGR already set
[ 1156.764162] binder: 8339:8352 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:25 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, &(0x7f0000000440)={0x7})

23:59:25 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x1200]}}}}, 0x48)

23:59:25 executing program 7 (fault-call:4 fault-nth:0):
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1156.791924] binder_alloc: binder_alloc_mmap_handler: 8339 20001000-20004000 already mapped failed -16
[ 1156.812282] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1156.814530] binder: 8339:8342 ioctl 40046207 0 returned -16
23:59:25 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xcbff000000000000]}, 0x6)

[ 1156.875147] binder: 8339:8352 transaction failed 29201/-22, size 64-8 line 3030
[ 1156.903220] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1156.906538] binder: undelivered TRANSACTION_ERROR: 29201
[ 1156.919752] binder: BINDER_SET_CONTEXT_MGR already set
23:59:25 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x97ffffff00000000}})

[ 1156.925727] binder: undelivered TRANSACTION_ERROR: 29201
[ 1156.933605] binder: 8375:8377 ioctl 40046207 0 returned -16
[ 1156.950145] FAULT_INJECTION: forcing a failure.
[ 1156.950145] name failslab, interval 1, probability 0, space 0, times 0
[ 1156.961506] CPU: 1 PID: 8377 Comm: syz-executor7 Not tainted 4.18.0-rc3-next-20180706+ #1
[ 1156.969837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1156.979201] Call Trace:
[ 1156.981834]  dump_stack+0x1c9/0x2b4
[ 1156.985486]  ? dump_stack_print_info.cold.2+0x52/0x52
[ 1156.990712]  should_fail.cold.4+0xa/0x11
[ 1156.994822]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[ 1156.999948]  ? xa_set_tag+0x40/0x40
[ 1157.003597]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1157.009154]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1157.014777]  ? trace_hardirqs_on+0x10/0x10
[ 1157.019059]  ? lock_acquire+0x1e4/0x540
[ 1157.023063]  ? trace_hardirqs_on+0x10/0x10
[ 1157.027357]  ? trace_hardirqs_on+0x10/0x10
[ 1157.031620]  ? lock_acquire+0x1e4/0x540
[ 1157.035602]  ? fs_reclaim_acquire+0x20/0x20
[ 1157.039946]  ? lock_downgrade+0x8f0/0x8f0
[ 1157.044110]  ? lock_acquire+0x1e4/0x540
[ 1157.048092]  ? check_same_owner+0x340/0x340
[ 1157.052423]  ? rcu_note_context_switch+0x730/0x730
[ 1157.057370]  __should_failslab+0x124/0x180
[ 1157.061616]  should_failslab+0x9/0x14
[ 1157.065442]  kmem_cache_alloc_trace+0x2cb/0x780
[ 1157.070122]  ? do_raw_spin_lock+0xc1/0x200
[ 1157.074369]  ? _raw_spin_unlock+0x22/0x30
[ 1157.078533]  binder_get_thread+0x255/0x880
[ 1157.082783]  ? check_same_owner+0x340/0x340
[ 1157.087140]  ? binder_open+0x920/0x920
[ 1157.091037]  ? check_same_owner+0x340/0x340
[ 1157.095361]  ? _kstrtoull+0x188/0x250
[ 1157.099193]  ? rcu_note_context_switch+0x730/0x730
[ 1157.104142]  binder_ioctl+0x25d/0x141e
[ 1157.108081]  ? binder_ioctl_write_read.isra.42+0xb10/0xb10
[ 1157.113725]  ? lock_acquire+0x1e4/0x540
[ 1157.117702]  ? __fget+0x4ac/0x740
[ 1157.121182]  ? lock_downgrade+0x8f0/0x8f0
[ 1157.125333]  ? lock_release+0xa30/0xa30
[ 1157.129306]  ? pid_task+0x115/0x200
[ 1157.132934]  ? find_vpid+0xf0/0xf0
[ 1157.136600]  ? __f_unlock_pos+0x19/0x20
[ 1157.140578]  ? __fget+0x4d5/0x740
[ 1157.144382]  ? ksys_dup3+0x690/0x690
[ 1157.148107]  ? kasan_check_write+0x14/0x20
[ 1157.152351]  ? __mutex_unlock_slowpath+0x197/0x8c0
[ 1157.157303]  ? fsnotify+0xbac/0x14e0
[ 1157.161024]  ? vfs_write+0x2f3/0x560
[ 1157.164775]  ? binder_ioctl_write_read.isra.42+0xb10/0xb10
[ 1157.170409]  do_vfs_ioctl+0x1de/0x1720
[ 1157.174322]  ? fsnotify_first_mark+0x350/0x350
[ 1157.178918]  ? __fsnotify_parent+0xcc/0x420
[ 1157.183245]  ? ioctl_preallocate+0x300/0x300
[ 1157.187659]  ? __fget_light+0x2f7/0x440
[ 1157.191654]  ? fget_raw+0x20/0x20
[ 1157.195113]  ? __sb_end_write+0xac/0xe0
[ 1157.199132]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1157.205199]  ? fput+0x130/0x1a0
[ 1157.208490]  ? ksys_write+0x1ae/0x260
[ 1157.212297]  ? security_file_ioctl+0x94/0xc0
[ 1157.216717]  ksys_ioctl+0xa9/0xd0
[ 1157.220174]  __x64_sys_ioctl+0x73/0xb0
[ 1157.224066]  do_syscall_64+0x1b9/0x820
[ 1157.227951]  ? finish_task_switch+0x1d3/0x870
[ 1157.232450]  ? syscall_return_slowpath+0x5e0/0x5e0
[ 1157.237489]  ? syscall_return_slowpath+0x31d/0x5e0
[ 1157.242425]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 1157.247562]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 1157.252583]  ? perf_trace_sys_enter+0xb10/0xb10
[ 1157.257260]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1157.262131]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1157.267326] RIP: 0033:0x455e29
[ 1157.270517] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
[ 1157.290010] RSP: 002b:00007f054099ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1157.297729] RAX: ffffffffffffffda RBX: 00007f054099f6d4 RCX: 0000000000455e29
[ 1157.305003] RDX: 0000000020007000 RSI: 00000000c0306201 RDI: 0000000000000013
[ 1157.312445] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[ 1157.319737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[ 1157.327015] R13: 00000000004bca1c R14: 00000000004caeb0 R15: 0000000000000000
[ 1157.337120] binder: 8375:8377 ioctl c0306201 20007000 returned -12
23:59:26 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
getrandom(&(0x7f00000000c0)=""/68, 0x44, 0x2)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x4700]}}}}, 0x48)

23:59:26 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x852a7470, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:26 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7109, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:26 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xc9000000]}, 0x6)

23:59:26 executing program 7 (fault-call:4 fault-nth:1):
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:26 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xddff000000000000}})

23:59:26 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, &(0x7f0000000440)={0x7})

[ 1157.895614] binder: BINDER_SET_CONTEXT_MGR already set
[ 1157.908598] FAULT_INJECTION: forcing a failure.
[ 1157.908598] name failslab, interval 1, probability 0, space 0, times 0
[ 1157.919962] CPU: 1 PID: 8391 Comm: syz-executor7 Not tainted 4.18.0-rc3-next-20180706+ #1
[ 1157.928013] binder: 8396:8399 ioctl 40046207 0 returned -16
[ 1157.928293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1157.943041] binder: 8396:8399 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1157.943736] Call Trace:
[ 1157.943763]  dump_stack+0x1c9/0x2b4
[ 1157.943784]  ? dump_stack_print_info.cold.2+0x52/0x52
[ 1157.943797]  ? _raw_spin_unlock+0x22/0x30
[ 1157.943819]  should_fail.cold.4+0xa/0x11
[ 1157.964252] binder: 8396:8399 transaction failed 29201/-22, size 64-8 line 3030
[ 1157.968141]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[ 1157.968161]  ? rcu_cleanup_dead_rnp+0x200/0x200
[ 1157.968182]  ? binder_transaction+0x665/0x7930
[ 1157.968199]  ? lock_downgrade+0x8f0/0x8f0
[ 1157.968212]  ? unwind_get_return_address+0x61/0xa0
[ 1157.968232]  ? lock_acquire+0x1e4/0x540
[ 1157.986337] binder_alloc: binder_alloc_mmap_handler: 8396 20001000-20004000 already mapped failed -16
[ 1157.989508]  ? fs_reclaim_acquire+0x20/0x20
[ 1157.989526]  ? lock_downgrade+0x8f0/0x8f0
[ 1157.989543]  ? kasan_check_write+0x14/0x20
[ 1157.989559]  ? lock_acquire+0x1e4/0x540
[ 1157.989573]  ? check_same_owner+0x340/0x340
[ 1157.989593]  ? rcu_note_context_switch+0x730/0x730
[ 1158.006110] binder: BINDER_SET_CONTEXT_MGR already set
[ 1158.007198]  __should_failslab+0x124/0x180
[ 1158.007217]  should_failslab+0x9/0x14
[ 1158.007235]  kmem_cache_alloc_trace+0x2cb/0x780
[ 1158.007251]  ? do_raw_spin_lock+0xc1/0x200
[ 1158.007272]  ? _raw_spin_unlock+0x22/0x30
[ 1158.031678] binder: 8396:8409 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1158.033314]  binder_transaction+0x13ca/0x7930
[ 1158.033333]  ? lock_acquire+0x1e4/0x540
[ 1158.033345]  ? is_bpf_text_address+0xae/0x170
[ 1158.033363]  ? lock_downgrade+0x8f0/0x8f0
23:59:26 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1158.045419] binder: 8396:8399 ioctl 40046207 0 returned -16
[ 1158.048001]  ? lock_release+0xa30/0xa30
[ 1158.048025]  ? rcu_cleanup_dead_rnp+0x200/0x200
[ 1158.048047]  ? binder_transaction_buffer_release+0x9d0/0x9d0
[ 1158.048060]  ? is_bpf_text_address+0xd7/0x170
[ 1158.048081]  ? kernel_text_address+0x79/0xf0
[ 1158.061259] binder: 8396:8409 transaction failed 29201/-22, size 64-8 line 3030
[ 1158.065014]  ? trace_hardirqs_on+0x10/0x10
[ 1158.065033]  ? __save_stack_trace+0x8d/0xf0
[ 1158.065050]  ? trace_hardirqs_on+0x10/0x10
[ 1158.065067]  ? trace_hardirqs_on+0x10/0x10
[ 1158.065088]  ? save_stack+0xa9/0xd0
[ 1158.080453] binder: undelivered TRANSACTION_ERROR: 29201
[ 1158.082492]  ? save_stack+0x43/0xd0
[ 1158.082509]  ? kasan_kmalloc+0xc4/0xe0
[ 1158.082521]  ? kasan_slab_alloc+0x12/0x20
[ 1158.082537]  ? __d_alloc+0xc8/0xd50
[ 1158.082558]  ? trace_hardirqs_on+0x10/0x10
[ 1158.090573] binder: undelivered TRANSACTION_ERROR: 29201
[ 1158.091013]  ? do_sys_open+0x584/0x720
[ 1158.140628] binder: BINDER_SET_CONTEXT_MGR already set
[ 1158.144449]  ? do_syscall_64+0x1b9/0x820
[ 1158.144467]  ? trace_hardirqs_on+0x10/0x10
[ 1158.144489]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1158.144506]  ? bpf_prog_kallsyms_find+0xde/0x4c0
[ 1158.144521]  ? lock_acquire+0x1e4/0x540
[ 1158.144536]  ? is_bpf_text_address+0xae/0x170
[ 1158.158771] binder: 8413:8414 ioctl 40046207 0 returned -16
[ 1158.161471]  ? trace_hardirqs_on+0x10/0x10
[ 1158.161489]  ? lock_acquire+0x1e4/0x540
[ 1158.161506]  ? mem_cgroup_id_get_many+0x160/0x160
[ 1158.161524]  ? trace_hardirqs_on+0x10/0x10
[ 1158.176130] binder: 8413:8414 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1158.177416]  ? lock_release+0xa30/0xa30
[ 1158.177430]  ? __wake_up_common_lock+0x1d0/0x330
[ 1158.177447]  ? __unlock_page_memcg+0x53/0x100
[ 1158.177462]  ? lock_downgrade+0x8f0/0x8f0
[ 1158.177478]  ? lock_acquire+0x1e4/0x540
[ 1158.177496]  ? __might_fault+0x12b/0x1e0
[ 1158.191639] binder: 8413:8414 transaction failed 29201/-22, size 64-8 line 3030
[ 1158.192105]  ? lock_downgrade+0x8f0/0x8f0
[ 1158.192123]  ? lock_release+0xa30/0xa30
23:59:27 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1158.204835] binder_alloc: binder_alloc_mmap_handler: 8413 20001000-20004000 already mapped failed -16
[ 1158.205436]  ? check_same_owner+0x340/0x340
[ 1158.205455]  ? lock_release+0xa30/0xa30
[ 1158.205480]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1158.205499]  binder_thread_write+0xdbb/0x2c30
[ 1158.205518]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1158.218240] binder: BINDER_SET_CONTEXT_MGR already set
[ 1158.218736]  ? binder_transaction+0x7930/0x7930
[ 1158.231331] binder: 8413:8415 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1158.232679]  ? lock_downgrade+0x8f0/0x8f0
[ 1158.232698]  ? lock_release+0xa30/0xa30
[ 1158.232720]  ? kasan_check_read+0x11/0x20
[ 1158.232736]  ? rcu_is_watching+0x8c/0x150
[ 1158.232756]  ? rcu_cleanup_dead_rnp+0x200/0x200
[ 1158.246619] binder: 8413:8414 ioctl 40046207 0 returned -16
[ 1158.250600]  ? trace_hardirqs_on+0x10/0x10
[ 1158.250616]  ? is_bpf_text_address+0xd7/0x170
[ 1158.250645]  ? kernel_text_address+0x79/0xf0
[ 1158.250661]  ? __kernel_text_address+0xd/0x40
[ 1158.250675]  ? ___ratelimit.cold.2+0x6b/0x6b
[ 1158.250696]  ? __save_stack_trace+0x8d/0xf0
[ 1158.264604] binder: 8413:8415 transaction failed 29201/-22, size 64-8 line 3030
[ 1158.268085]  ? save_stack+0xa9/0xd0
[ 1158.268101]  ? save_stack+0x43/0xd0
[ 1158.268116]  ? kasan_kmalloc+0xc4/0xe0
[ 1158.268129]  ? kmem_cache_alloc_trace+0x152/0x780
[ 1158.268154]  ? lock_acquire+0x1e4/0x540
[ 1158.282546] binder: undelivered TRANSACTION_ERROR: 29201
[ 1158.283786]  ? __might_fault+0x12b/0x1e0
[ 1158.283806]  ? lock_downgrade+0x8f0/0x8f0
[ 1158.283824]  ? lock_release+0xa30/0xa30
[ 1158.283841]  ? check_same_owner+0x340/0x340
[ 1158.283866]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1158.290103] binder: undelivered TRANSACTION_ERROR: 29201
[ 1158.291995]  ? _copy_from_user+0xdf/0x150
[ 1158.292017]  binder_ioctl_write_read.isra.42+0x2e7/0xb10
[ 1158.292036]  ? binder_thread_write+0x2c30/0x2c30
[ 1158.292058]  ? _raw_spin_unlock+0x22/0x30
[ 1158.350917] binder: BINDER_SET_CONTEXT_MGR already set
[ 1158.351612]  ? _binder_inner_proc_unlock+0x43/0x50
[ 1158.351636]  ? binder_get_thread+0x1b6/0x880
[ 1158.351653]  ? binder_open+0x920/0x920
[ 1158.351672]  ? check_same_owner+0x340/0x340
[ 1158.351692]  ? rcu_note_context_switch+0x730/0x730
[ 1158.363492] binder: 8416:8417 ioctl 40046207 0 returned -16
[ 1158.364656]  binder_ioctl+0xd2f/0x141e
[ 1158.364678]  ? binder_ioctl_write_read.isra.42+0xb10/0xb10
[ 1158.364696]  ? lock_acquire+0x1e4/0x540
[ 1158.364714]  ? __fget+0x4ac/0x740
[ 1158.381845] binder: 8416:8417 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1158.384188]  ? lock_downgrade+0x8f0/0x8f0
[ 1158.384206]  ? lock_release+0xa30/0xa30
[ 1158.384221]  ? pid_task+0x115/0x200
23:59:27 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1158.384235]  ? find_vpid+0xf0/0xf0
[ 1158.384252]  ? __f_unlock_pos+0x19/0x20
[ 1158.384268]  ? __fget+0x4d5/0x740
[ 1158.397542] binder: 8416:8417 transaction failed 29201/-22, size 64-8 line 3030
[ 1158.404924]  ? ksys_dup3+0x690/0x690
[ 1158.404945]  ? kasan_check_write+0x14/0x20
[ 1158.404960]  ? __mutex_unlock_slowpath+0x197/0x8c0
[ 1158.404973]  ? fsnotify+0xbac/0x14e0
[ 1158.404985]  ? vfs_write+0x2f3/0x560
[ 1158.405007]  ? binder_ioctl_write_read.isra.42+0xb10/0xb10
23:59:27 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x2000000]}, 0x6)

[ 1158.425802] binder_alloc: binder_alloc_mmap_handler: 8416 20001000-20004000 already mapped failed -16
[ 1158.430433]  do_vfs_ioctl+0x1de/0x1720
[ 1158.430449]  ? fsnotify_first_mark+0x350/0x350
[ 1158.430462]  ? __fsnotify_parent+0xcc/0x420
[ 1158.430476]  ? ioctl_preallocate+0x300/0x300
[ 1158.430488]  ? __fget_light+0x2f7/0x440
[ 1158.430501]  ? fget_raw+0x20/0x20
[ 1158.430517]  ? __sb_end_write+0xac/0xe0
[ 1158.430533]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1158.430551]  ? fput+0x130/0x1a0
[ 1158.448044] binder: BINDER_SET_CONTEXT_MGR already set
[ 1158.452601]  ? ksys_write+0x1ae/0x260
[ 1158.452630]  ? security_file_ioctl+0x94/0xc0
[ 1158.452645]  ksys_ioctl+0xa9/0xd0
[ 1158.452659]  __x64_sys_ioctl+0x73/0xb0
[ 1158.452676]  do_syscall_64+0x1b9/0x820
[ 1158.452695]  ? finish_task_switch+0x1d3/0x870
[ 1158.469573] binder: 8416:8418 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1158.472506]  ? syscall_return_slowpath+0x5e0/0x5e0
[ 1158.472523]  ? syscall_return_slowpath+0x31d/0x5e0
[ 1158.472540]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 1158.472556]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 1158.472571]  ? perf_trace_sys_enter+0xb10/0xb10
[ 1158.472592]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1158.486590] binder: 8416:8417 ioctl 40046207 0 returned -16
[ 1158.486949]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1158.486961] RIP: 0033:0x455e29
[ 1158.486965] Code: 1d 
[ 1158.497059] binder: 8416:8418 transaction failed 29201/-22, size 64-8 line 3030
[ 1158.499740] ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 
[ 1158.515968] binder: undelivered TRANSACTION_ERROR: 29201
[ 1158.519928] 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 
[ 1158.532800] binder: undelivered TRANSACTION_ERROR: 29201
[ 1158.536231] f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
[ 1158.536311] RSP: 002b:00007f054099ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1158.536332] RAX: ffffffffffffffda RBX: 00007f054099f6d4 RCX: 0000000000455e29
[ 1158.584476] binder: BINDER_SET_CONTEXT_MGR already set
[ 1158.587599] RDX: 0000000020007000 RSI: 00000000c0306201 RDI: 0000000000000013
23:59:27 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffd5}})

23:59:27 executing program 7 (fault-call:4 fault-nth:2):
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:27 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x900000000000000]}}}}, 0x48)

23:59:27 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xa00]}, 0x6)

[ 1158.587614] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[ 1158.587622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[ 1158.587630] R13: 00000000004bca1c R14: 00000000004caeb0 R15: 0000000000000001
[ 1158.587768] binder: 8390:8391 transaction failed 29201/-12, size 88-96 line 2908
[ 1158.588300] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1158.615540] binder: 8419:8420 ioctl 40046207 0 returned -16
[ 1158.621459] binder: undelivered TRANSACTION_ERROR: 29201
[ 1158.643544] binder: 8419:8420 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1158.860307] binder: 8419:8420 transaction failed 29201/-22, size 64-8 line 3030
[ 1158.875526] FAULT_INJECTION: forcing a failure.
[ 1158.875526] name failslab, interval 1, probability 0, space 0, times 0
[ 1158.888983] CPU: 0 PID: 8443 Comm: syz-executor7 Not tainted 4.18.0-rc3-next-20180706+ #1
[ 1158.897323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1158.906779] Call Trace:
[ 1158.909393]  dump_stack+0x1c9/0x2b4
[ 1158.913045]  ? dump_stack_print_info.cold.2+0x52/0x52
[ 1158.918630]  ? __kernel_text_address+0xd/0x40
[ 1158.923156]  should_fail.cold.4+0xa/0x11
[ 1158.927255]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[ 1158.932406]  ? save_stack+0xa9/0xd0
[ 1158.936061]  ? save_stack+0x43/0xd0
[ 1158.939719]  ? kasan_kmalloc+0xc4/0xe0
[ 1158.942206] binder: BINDER_SET_CONTEXT_MGR already set
[ 1158.943629]  ? kmem_cache_alloc_trace+0x152/0x780
[ 1158.943653]  ? binder_transaction+0x13ca/0x7930
[ 1158.958481]  ? binder_thread_write+0xdbb/0x2c30
[ 1158.963185]  ? binder_ioctl_write_read.isra.42+0x2e7/0xb10
[ 1158.963488] binder: 8419:8448 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1158.968822]  ? do_vfs_ioctl+0x1de/0x1720
[ 1158.968836]  ? ksys_ioctl+0xa9/0xd0
[ 1158.968848]  ? __x64_sys_ioctl+0x73/0xb0
[ 1158.968864]  ? do_syscall_64+0x1b9/0x820
[ 1158.968877]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1158.968893]  ? unwind_get_return_address+0x61/0xa0
[ 1158.968925]  ? lock_acquire+0x1e4/0x540
[ 1159.004564] binder: 8419:8420 ioctl 40046207 0 returned -16
[ 1159.007728]  ? fs_reclaim_acquire+0x20/0x20
[ 1159.007747]  ? lock_downgrade+0x8f0/0x8f0
[ 1159.007765]  ? lock_acquire+0x1e4/0x540
[ 1159.007781]  ? check_same_owner+0x340/0x340
[ 1159.007800]  ? rcu_note_context_switch+0x730/0x730
[ 1159.027738] binder: 8419:8448 transaction failed 29201/-22, size 64-8 line 3030
[ 1159.030252]  __should_failslab+0x124/0x180
[ 1159.030272]  should_failslab+0x9/0x14
[ 1159.030290]  kmem_cache_alloc_trace+0x2cb/0x780
[ 1159.030304]  ? do_raw_spin_lock+0xc1/0x200
[ 1159.030322]  ? __lockdep_init_map+0x105/0x590
[ 1159.064093]  binder_transaction+0x144d/0x7930
[ 1159.068602]  ? lock_acquire+0x1e4/0x540
[ 1159.072582]  ? is_bpf_text_address+0xae/0x170
[ 1159.077097]  ? lock_downgrade+0x8f0/0x8f0
[ 1159.081253]  ? lock_release+0xa30/0xa30
[ 1159.085248]  ? binder_transaction_buffer_release+0x9d0/0x9d0
[ 1159.091051]  ? is_bpf_text_address+0xd7/0x170
[ 1159.095547]  ? kernel_text_address+0x79/0xf0
[ 1159.099953]  ? trace_hardirqs_on+0x10/0x10
[ 1159.104185]  ? __save_stack_trace+0x8d/0xf0
[ 1159.108509]  ? trace_hardirqs_on+0x10/0x10
[ 1159.112738]  ? perf_trace_lock_acquire+0xeb/0x9a0
[ 1159.117573]  ? trace_hardirqs_on+0x10/0x10
[ 1159.121808]  ? save_stack+0xa9/0xd0
[ 1159.125445]  ? trace_hardirqs_on+0x10/0x10
[ 1159.129672]  ? do_sys_open+0x584/0x720
[ 1159.133553]  ? do_syscall_64+0x1b9/0x820
[ 1159.137612]  ? trace_hardirqs_on+0x10/0x10
[ 1159.141844]  ? perf_trace_lock+0x920/0x920
[ 1159.146087]  ? perf_trace_lock+0x920/0x920
[ 1159.150315]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1159.155338]  ? bpf_prog_kallsyms_find+0xde/0x4c0
[ 1159.160091]  ? perf_trace_lock_acquire+0xeb/0x9a0
[ 1159.164936]  ? perf_trace_lock+0x920/0x920
[ 1159.169166]  ? perf_trace_lock+0x920/0x920
[ 1159.173399]  ? lock_acquire+0x1e4/0x540
[ 1159.177369]  ? mem_cgroup_id_get_many+0x160/0x160
[ 1159.182211]  ? trace_hardirqs_on+0x10/0x10
[ 1159.186439]  ? lock_release+0xa30/0xa30
[ 1159.190409]  ? __unlock_page_memcg+0x53/0x100
[ 1159.194895]  ? lock_downgrade+0x8f0/0x8f0
[ 1159.199042]  ? lock_acquire+0x1e4/0x540
[ 1159.203013]  ? __might_fault+0x12b/0x1e0
[ 1159.207076]  ? lock_downgrade+0x8f0/0x8f0
[ 1159.211222]  ? lock_release+0xa30/0xa30
[ 1159.215199]  ? lock_release+0xa30/0xa30
[ 1159.219359]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1159.224897]  binder_thread_write+0xdbb/0x2c30
[ 1159.229393]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1159.234417]  ? binder_transaction+0x7930/0x7930
[ 1159.239085]  ? lock_downgrade+0x8f0/0x8f0
[ 1159.243245]  ? lock_release+0xa30/0xa30
[ 1159.247426]  ? kasan_check_read+0x11/0x20
[ 1159.251572]  ? rcu_is_watching+0x8c/0x150
[ 1159.255719]  ? perf_trace_lock_acquire+0xeb/0x9a0
[ 1159.260577]  ? trace_hardirqs_on+0x10/0x10
[ 1159.264831]  ? perf_trace_lock+0x920/0x920
[ 1159.269066]  ? kernel_text_address+0x79/0xf0
[ 1159.273485]  ? __kernel_text_address+0xd/0x40
[ 1159.277983]  ? ___ratelimit.cold.2+0x6b/0x6b
[ 1159.282396]  ? __save_stack_trace+0x8d/0xf0
[ 1159.286727]  ? perf_trace_lock_acquire+0xeb/0x9a0
[ 1159.291573]  ? perf_trace_lock+0x920/0x920
[ 1159.295800]  ? kmem_cache_alloc_trace+0x152/0x780
[ 1159.300637]  ? lock_acquire+0x1e4/0x540
[ 1159.304600]  ? __might_fault+0x12b/0x1e0
[ 1159.308651]  ? lock_downgrade+0x8f0/0x8f0
[ 1159.312895]  ? lock_release+0xa30/0xa30
[ 1159.316877]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1159.322407]  ? _copy_from_user+0xdf/0x150
[ 1159.326567]  binder_ioctl_write_read.isra.42+0x2e7/0xb10
[ 1159.332032]  ? binder_thread_write+0x2c30/0x2c30
[ 1159.336796]  ? _raw_spin_unlock+0x22/0x30
[ 1159.340942]  ? _binder_inner_proc_unlock+0x43/0x50
[ 1159.345862]  ? binder_get_thread+0x1b6/0x880
[ 1159.350293]  ? binder_open+0x920/0x920
[ 1159.354179]  ? check_same_owner+0x340/0x340
[ 1159.358516]  ? rcu_note_context_switch+0x730/0x730
[ 1159.363466]  binder_ioctl+0xd2f/0x141e
[ 1159.367371]  ? binder_ioctl_write_read.isra.42+0xb10/0xb10
[ 1159.372989]  ? lock_acquire+0x1e4/0x540
[ 1159.376966]  ? __fget+0x4ac/0x740
[ 1159.380431]  ? lock_downgrade+0x8f0/0x8f0
[ 1159.384575]  ? lock_release+0xa30/0xa30
[ 1159.388563]  ? pid_task+0x115/0x200
[ 1159.392186]  ? find_vpid+0xf0/0xf0
[ 1159.395725]  ? __f_unlock_pos+0x19/0x20
[ 1159.399708]  ? __fget+0x4d5/0x740
[ 1159.403157]  ? ksys_dup3+0x690/0x690
[ 1159.406871]  ? kasan_check_write+0x14/0x20
[ 1159.411119]  ? __mutex_unlock_slowpath+0x197/0x8c0
[ 1159.416487]  ? fsnotify+0xbac/0x14e0
[ 1159.420195]  ? vfs_write+0x2f3/0x560
[ 1159.423904]  ? binder_ioctl_write_read.isra.42+0xb10/0xb10
[ 1159.429525]  do_vfs_ioctl+0x1de/0x1720
[ 1159.433410]  ? fsnotify_first_mark+0x350/0x350
[ 1159.437985]  ? __fsnotify_parent+0xcc/0x420
[ 1159.442301]  ? ioctl_preallocate+0x300/0x300
[ 1159.446701]  ? __fget_light+0x2f7/0x440
[ 1159.450675]  ? fget_raw+0x20/0x20
[ 1159.454127]  ? __sb_end_write+0xac/0xe0
[ 1159.458119]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1159.463735]  ? fput+0x130/0x1a0
[ 1159.467013]  ? ksys_write+0x1ae/0x260
[ 1159.470839]  ? security_file_ioctl+0x94/0xc0
[ 1159.475340]  ksys_ioctl+0xa9/0xd0
[ 1159.478793]  __x64_sys_ioctl+0x73/0xb0
[ 1159.482675]  do_syscall_64+0x1b9/0x820
[ 1159.486556]  ? finish_task_switch+0x1d3/0x870
[ 1159.491053]  ? syscall_return_slowpath+0x5e0/0x5e0
[ 1159.495974]  ? syscall_return_slowpath+0x31d/0x5e0
[ 1159.500894]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 1159.505905]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 1159.510917]  ? perf_trace_sys_enter+0xb10/0xb10
[ 1159.515585]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1159.520429]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1159.525626] RIP: 0033:0x455e29
[ 1159.528801] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
[ 1159.548099] RSP: 002b:00007f054099ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1159.555797] RAX: ffffffffffffffda RBX: 00007f054099f6d4 RCX: 0000000000455e29
[ 1159.563058] RDX: 0000000020007000 RSI: 00000000c0306201 RDI: 0000000000000013
[ 1159.570317] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[ 1159.577579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[ 1159.585184] R13: 00000000004bca1c R14: 00000000004caeb0 R15: 0000000000000002
[ 1159.592673] binder: 8437:8443 transaction failed 29201/-12, size 88-96 line 2918
[ 1159.592869] binder_alloc: binder_alloc_mmap_handler: 8419 20001000-20004000 already mapped failed -16
[ 1159.621382] binder: undelivered TRANSACTION_ERROR: 29201
23:59:28 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x7f70a478fb9da27, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:28 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x388, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:28 executing program 4 (fault-call:3 fault-nth:0):
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:28 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x11]}, 0x6)

23:59:28 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfffffff5}})

[ 1159.646180] binder: undelivered TRANSACTION_ERROR: 29201
[ 1159.685967] binder: undelivered TRANSACTION_ERROR: 29201
23:59:28 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x700000000000000]}}}}, 0x48)

23:59:28 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:28 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:28 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x28000000]}, 0x6)

[ 1159.700412] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:28 executing program 1:
r0 = epoll_create1(0xc0000)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:28 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x4000}})

23:59:28 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x12000000]}}}}, 0x48)

[ 1159.775353] binder: BINDER_SET_CONTEXT_MGR already set
[ 1159.781419] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1159.796326] binder: 8473:8474 ioctl 40046207 0 returned -16
[ 1159.813348] binder: 8473:8474 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:28 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
fanotify_init(0x8, 0x80000)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x2, 0x4)

[ 1159.837928] binder: 8473:8474 transaction failed 29201/-22, size 64-8 line 3030
[ 1159.862839] binder_alloc: binder_alloc_mmap_handler: 8473 20001000-20004000 already mapped failed -16
[ 1159.890638] binder: BINDER_SET_CONTEXT_MGR already set
[ 1159.920340] binder: 8473:8474 ioctl 40046207 0 returned -16
[ 1159.934413] binder: 8473:8494 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1159.948469] binder: 8473:8494 transaction failed 29201/-22, size 64-8 line 3030
23:59:28 executing program 7 (fault-call:4 fault-nth:3):
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:28 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x3f000000]}}}}, 0x48)

23:59:28 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xedc000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:28 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2})
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
prctl$setname(0xf, &(0x7f0000000000)='--\x00')
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x97e929a35d2bcda, 0x0)
ppoll(&(0x7f0000000100)=[{r3}, {r0}, {r3, 0x8400}, {r1, 0x40}, {r2, 0x2000}, {r0, 0x6010}], 0x6, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={0xdce3}, 0x8)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000300)={0x8001, 0x3, 0x100, 'queue1\x00', 0xfb4})
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:28 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x300000000000000]}, 0x6)

23:59:28 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdaff0000}})

23:59:28 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7, 0x10000)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1159.966515] binder: undelivered TRANSACTION_ERROR: 29201
23:59:28 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0x9, @empty, 0x489}, {0xa, 0x4e20, 0x4, @loopback={0x0, 0x1}, 0x4}, 0x8, [0x4, 0x8000, 0x4d201ef0, 0x3, 0x8, 0x800, 0x5, 0x3ff]}, 0x5c)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:28 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x8000000]}, 0x6)

[ 1159.995995] binder: undelivered TRANSACTION_ERROR: 29201
23:59:28 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:28 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x48000000]}}}}, 0x48)

23:59:28 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x4000000000000000}})

23:59:28 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4000000, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1160.088134] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1160.108195] binder: 8516:8517 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:29 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x3f00000000000000]}}}}, 0x48)

23:59:29 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x7fff, {{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x200}}}, 0x88)

23:59:29 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4000]}, 0x6)

[ 1160.137742] binder: 8516:8517 transaction failed 29201/-22, size 64-8 line 3030
[ 1160.173160] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1160.207612] binder_alloc: binder_alloc_mmap_handler: 8516 20001000-20004000 already mapped failed -16
[ 1160.258134] binder: BINDER_SET_CONTEXT_MGR already set
[ 1160.270113] binder: BINDER_SET_CONTEXT_MGR already set
[ 1160.282724] binder: 8516:8517 ioctl 40046207 0 returned -16
[ 1160.290378] binder: 8542:8544 ioctl 40046207 0 returned -16
[ 1160.297268] binder_alloc: 8516: binder_alloc_buf, no vma
23:59:29 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:29 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdaff000000000000}})

23:59:29 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x400000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1160.302849] binder: 8516:8534 transaction failed 29189/-3, size 64-8 line 2967
[ 1160.309104] binder_alloc: 8516: binder_alloc_buf, no vma
[ 1160.311903] binder: undelivered TRANSACTION_ERROR: 29201
[ 1160.315754] binder: 8542:8544 transaction failed 29189/-3, size 88-96 line 2967
[ 1160.329174] binder: undelivered TRANSACTION_ERROR: 29189
[ 1160.350574] binder: undelivered TRANSACTION_ERROR: 29189
[ 1160.369471] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1160.392535] binder: 8552:8553 got transaction with too large buffer
[ 1160.399169] binder: 8552:8553 transaction failed 29201/-22, size 88-96 line 3126
[ 1160.407881] binder: undelivered TRANSACTION_ERROR: 29201
[ 1160.427568] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:29 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:29 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x2000000]}}}}, 0x48)

23:59:29 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x14]}, 0x6)

23:59:29 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8)
getresgid(&(0x7f0000000200), &(0x7f0000000240)=<r3=>0x0, &(0x7f00000002c0))
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={r1, r2, r3}, 0xc)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x2000, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000400)=0x40, 0x8)
r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
r6 = creat(&(0x7f0000000340)='./file0\x00', 0x108)
getpeername$unix(r4, &(0x7f0000000580)=@abs, &(0x7f0000000440)=0x6e)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x80045300, &(0x7f0000000380))
ioctl$LOOP_SET_STATUS64(r5, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r7 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$netlink(r6, &(0x7f0000001cc0)={&(0x7f0000000600)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc, &(0x7f0000001c40)=[{&(0x7f0000000640)={0x1b0, 0x1d, 0x4, 0x70bd28, 0x25dfdbfd, "", [@nested={0x1a0, 0x69, [@generic="2f4125b22fe7e312439736e43fd2bbd0cca17d27c6ca823c4a1315938d80b9811f3bfd4ac8563bed35", @generic="c2b8110371784da0a23580d1e60552e66efb1f369aa8c57a9fb0990e012daee42aba8aac7577ecdb0ad285a454ee805c00b95ffa185405f1330fa682578a39ba351c59bdf9df8e8ab1b537c7bf2aff4ad1cd45a2233787b0124eb13a1c31b7f9", @generic="f78dabe72669cd8c1b55dbb2aa826781d043bc5ac3153c4ab3ce3ce466fb30923c2d9557701a51e605b0976227bce3d7419b28a018ed51576cf3ba5e89037855b6a1993adb12415df5dbf3e843e3bf3aaf8a730fb0c2eddf6f3bef48a40924c3e40af492a7834d561e2b21c97544b81fba2da7bf6a7769ef0fe23f44b66a8e244b86b2", @generic="2babe0b17f18310042736abb5b9163dbb78fdaeff337fb099042f3bb04bd88eff8d73f22bf05c5d84d6f1e8c428cda7f3623c130411627639ada42030067e16e4fb1ca1de93db0ac3bf71cc7af700648d7df586a408996c6f77019727f5ca117d295407076988a09fdc60f33db7ac01c9fb36f2728bd33120bacbaaca4988e31ceb23724", @typed={0x8, 0xe, @str='\x00'}, @typed={0x4, 0x56}]}]}, 0x1b0}, {&(0x7f0000000800)={0x1274, 0x41, 0x0, 0x70bd29, 0x25dfdbff, "", [@generic="b02991e06542ae0f0d4dc13ea8182ba8474535ed19162235388efdc1ef9d5ecedd05402458608f65e9d12a8a44c7db115c731d609dad6bfc341c1d6f9b12e240994e24a4dfeb5559cc51ca17b46fe6f7149c3690eb6e6fc9ceb0a5cf69629c3f5efd6a85db53fd619096cd16577660aba263a02f0b28f56faf3d19519ea92f0454ce6611d0c8c40a8428b296c95261f46153ce7d83670cc4be44d636d1cb14296b7fd31617807890546fca25f853c0", @nested={0x118, 0x64, [@generic="7c1df59d709974790e2c2f32414763711e373ecbddb365d3d805b880d40e473cfa22859c012b4cec8873fedbf4756d6ecdfcc8797521f866c627af2a44179f8779b3320a67b42ac118e7e11155f2fa9a2c3ed2614b53e067233d4fe9393cbaf4732a0b35348083f9efb8559be665f2925112fd3a502c0ac26c3b54ea9dbdfb4041", @generic="cd8ba9bf9bd94475ee0624d4340ac1f37ed5faf7d8271c34a2f7f2072ddc591165c1ebfde0194f251efa3d", @generic="bd49d2d82ea7a273aa9f370855223d5063ad958bcd6bd8e5e82be322166ea891ba8db811449884d09ff5134bbce2c637c2753313747985cebff6d1c7204fa7b1ee61a5031ca37adda75974349512f8b91ed092e28aae74afa8b3398e7a135bfc54185ea1db8aa1"]}, @generic="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", @generic="ac98e1a2c979fca66a3b9af647c594f12fb0345f48a15d2c2f9d4ac267155923c00cf7e823614fdab46df6d52013cfda3a1f35ade71b6818721d5c75c50a4e00d2b3545a13369f3c40f1b0c094480f44c7d46c0957e37f42328203ac401ededd6398d599da0240e8eee943bda15314fb2864cab2194b6a635bfc4f585b7f4fe55f0d90c75e16e0601bf2e2fe0c9f63e99ab62306033a3be1c0aed903d6"]}, 0x1274}, {&(0x7f0000001a80)={0x1b8, 0x3c, 0x20, 0x70bd28, 0x25dfdbfe, "", [@nested={0x38, 0x26, [@typed={0x24, 0x3e, @binary="5b9a711f5808f70e248b88cad88eca825809bc0fdcd939d5f9f4bb9b6b5a"}, @typed={0x8, 0x3b, @pid=r1}, @typed={0x8, 0x68, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}]}, @typed={0x8, 0x71, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @typed={0x8, 0x45, @uid=r2}, @typed={0x8, 0x36, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @generic="4852c9f8235ad1e5bca999bae78a131bb5a18dfa96a60107bed4dd4d2c7b9e5c7b5879c20e671635e055dd2448dd79c1973846787fba0cf2cf52e6c0f7de0df53984ebd407c734f001bf3d151baaa9168870ab260a54e873d81a505889d1d8b0d00e549bfef38ec6e71934052399c669ee0ab3e7e8a223b01b695b9cdffecadbb009f4803916988224d81a40496c8b20e023c69de4dd0776bbeb7eefb2e9227d1b33185d5e8268cf50bdb886024562835a4e979c1bd8fd203966d318693a0a8d1143871e761427102c2ed1d306ae5fc5256e85cc5a763ab2d108924c8f10d95be412a7a62d", @generic="79ddb64f1b8f783061418dea70ca88d9b87ef9a3c086d2922c77d9ccd935acb424ca4c258b53611ed5d8d25fceb1a69b3f7bc90acadbd60c89870d8b5e33529ae9609d574ad2e6d9f6729f3e56ff97c66a3f9e7e81740d170c599f5bd2a27a19eab775480fd1937aeb0fa5ffa4e102", @typed={0x4, 0x6f}]}, 0x1b8}], 0x3, &(0x7f0000001c80)=[@rights={0x28, 0x1, 0x1, [r4, r6, r5, r5, r7, r4]}, @rights={0x18, 0x1, 0x1, [r0, r5]}], 0x40, 0x4}, 0x80)

23:59:29 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:29 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:29 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x8cffffff00000000}})

23:59:29 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7400000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1160.915580] binder: BINDER_SET_CONTEXT_MGR already set
[ 1160.917124] binder_alloc: binder_alloc_mmap_handler: 8569 20001000-20004000 already mapped failed -16
[ 1160.938606] binder: 8559:8571 ioctl 40046207 0 returned -16
23:59:29 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xf401000000000000]}, 0x6)

23:59:29 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x40000}})

23:59:29 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf3]}}}}, 0x48)

23:59:29 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x20, 0x4)
recvmmsg(r2, &(0x7f0000004e40), 0x196, 0x0, &(0x7f0000000480))
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x81, 0x82)
ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000040)={0x6, 0x1000, 0x1})
ioctl$LOOP_SET_STATUS64(r4, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae7f00000000000000ce195bf4c5f77ca523017b1c002ac33f72d6969f31f039f17cc635b08020c35e5fa4a700", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1160.958529] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1160.977571] binder: BINDER_SET_CONTEXT_MGR already set
[ 1160.991770] binder: 8569:8572 ioctl 40046207 0 returned -16
[ 1161.001770] binder_alloc: 8569: binder_alloc_buf, no vma
[ 1161.007378] binder: 8559:8571 transaction failed 29189/-3, size 64-8 line 2967
23:59:29 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:29 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd4ff}})

23:59:29 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xffffffffffffffff]}}}}, 0x48)

23:59:29 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x200001)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000200)=""/91)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080)="b2077611873452e20cb0e06c89937a923fb11809b7dcccb507c95975c7", &(0x7f00000000c0)=""/254}, 0x18)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x400000080)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x3, 0x70, 0xff, 0x2, 0x40, 0x9, 0x0, 0x2, 0x40, 0x3, 0x7, 0x3, 0x81, 0x8, 0x8, 0x5, 0x100, 0xac00000000000, 0x99a, 0x6, 0xfffffffffffffff7, 0xa6, 0x2, 0x1, 0x52cbb649, 0x9, 0x9, 0x7ff, 0x3, 0xa55f, 0x9, 0x3, 0x1762, 0x10001, 0x8, 0x4, 0x0, 0x2, 0x0, 0x81, 0x4, @perf_config_ext={0xffff, 0x8}, 0x10000, 0x9, 0x100000000, 0x6, 0x0, 0x1ff, 0x80000001})
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
socket$xdp(0x2c, 0x3, 0x0)

[ 1161.084128] binder_alloc: binder_alloc_mmap_handler: 8559 20001000-20004000 already mapped failed -16
[ 1161.093929] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1161.106702] binder_alloc: binder_alloc_mmap_handler: 8595 20001000-20004000 already mapped failed -16
[ 1161.116886] binder: BINDER_SET_CONTEXT_MGR already set
[ 1161.123178] binder: BINDER_SET_CONTEXT_MGR already set
[ 1161.128224] binder: 8559:8571 ioctl 40046207 0 returned -16
[ 1161.135319] binder_alloc: 8595: binder_alloc_buf, no vma
[ 1161.140969] binder: 8559:8599 transaction failed 29189/-3, size 64-8 line 2967
[ 1161.160088] binder: 8595:8597 ioctl 40046207 0 returned -16
[ 1161.170203] binder: undelivered TRANSACTION_ERROR: 29189
[ 1161.186232] binder: undelivered TRANSACTION_ERROR: 29189
23:59:30 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@local, @multicast2, <r3=>0x0}, &(0x7f0000000300)=0xc)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, <r4=>0x0}, &(0x7f0000000380)=0xc)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@multicast2=0xe0000002, 0x4e20, 0x7c, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x29, r3, r4}, {0x9, 0x4, 0x6, 0x1f, 0x0, 0x2, 0x2, 0x100000000}, {0x6, 0x7, 0x200, 0x400}, 0x0, 0x6e6bb3, 0x1, 0x1, 0x3}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d5, 0x2b}, 0xa, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x3502, 0x3, 0x3, 0x8, 0x1, 0x0, 0x3f}}, 0xe8)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:30 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xf4010000]}, 0x6)

23:59:30 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xd803000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:30 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdaff}})

23:59:30 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x9800000000000000, 0x83)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:30 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:30 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x8]}}}}, 0x48)

23:59:30 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1161.860767] binder: 8620:8626 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1161.871802] binder: 8620:8626 transaction failed 29201/-22, size 64-8 line 3030
[ 1161.879835] binder: BINDER_SET_CONTEXT_MGR already set
23:59:30 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, 0x3b, 0x200, 0x70bd2a, 0x25dfdbfe, {0x1c}, [@nested={0xd4, 0x28, [@generic="041f9c636f4dc42b17", @generic="00e6ab84791ce679e5241293a44aa14c0ee232107e52de64fbc9", @generic="1a4266cd0766898a2c7874cabb0fe786cfb42bb6f5392e43b5a262583e42521f3e28db94b66f4da5694e76eadcceda53b206b14a05efa4d3b0127ee15cef06926b2ddf3fe0c70847dcf5ec5f8ebbac47fd060902c4d613bc40f9415d28d0b5a1394365b7822980e94521b632180cde3c165e03d5a51d0556c65cc127d541720e6f42a2c168dff181", @generic="efd8d9a1d9efd9480cd7a85e01008d5d06a9b5376816c9d0ef51f6996534cb35cd8ec5"]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x810}, 0x90)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:30 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x2000000000000]}}}}, 0x48)

23:59:30 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xcbff0000]}, 0x6)

[ 1161.904421] binder: 8615:8616 ioctl 40046207 0 returned -16
[ 1161.913097] binder_alloc: binder_alloc_mmap_handler: 8615 20001000-20004000 already mapped failed -16
[ 1161.924129] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1161.933869] binder_alloc: binder_alloc_mmap_handler: 8620 20001000-20004000 already mapped failed -16
23:59:30 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1000000000000000}})

23:59:30 executing program 4:
r0 = socket$inet6(0xa, 0x80809, 0x6)
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80, 0x101880)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x6)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x10000, 0xffff})
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xb9, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1161.952688] binder: BINDER_SET_CONTEXT_MGR already set
[ 1161.958111] binder: BINDER_SET_CONTEXT_MGR already set
[ 1161.977233] binder: 8620:8626 ioctl 40046207 0 returned -16
[ 1161.984168] binder: 8615:8616 ioctl 40046207 0 returned -16
23:59:30 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:30 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf4ffffff]}}}}, 0x48)

[ 1162.015719] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1162.039626] binder_alloc: 8620: binder_alloc_buf, no vma
[ 1162.045294] binder: 8620:8654 transaction failed 29189/-3, size 64-8 line 2967
23:59:30 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x74000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1162.073407] binder: BINDER_SET_CONTEXT_MGR already set
[ 1162.103115] binder: 8656:8657 ioctl 40046207 0 returned -16
[ 1162.113038] binder: undelivered TRANSACTION_ERROR: 29189
[ 1162.120545] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1162.146963] binder: undelivered TRANSACTION_ERROR: 29201
[ 1162.156341] binder_alloc: binder_alloc_mmap_handler: 8656 20001000-20004000 already mapped failed -16
23:59:31 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='proc\x00'}, 0x10)
setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000400)=0x4, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
chown(&(0x7f0000000000)='./file0\x00', r3, r4)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000280)={'ipddp0\x00', {0x2, 0x4e21, @multicast1=0xe0000001}})

23:59:31 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1100000000000000]}, 0x6)

23:59:31 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf6ffffff}})

23:59:31 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x100000000000000]}}}}, 0x48)

23:59:31 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:31 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:31 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:31 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='$GPL{\x00'}, 0x10)
accept4$bt_l2cap(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x800)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='/dev/loop#\x00', 0xffffffffffffff9c}, 0x10)
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000000c0))
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1162.967387] binder: 8682:8684 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1162.973750] binder: BINDER_SET_CONTEXT_MGR already set
[ 1163.007111] binder: 8680:8688 ioctl 40046207 0 returned -16
23:59:31 executing program 4:
r0 = socket$inet6(0xa, 0x80b, 0xa)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0]}, &(0x7f0000000080)=0x1c)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, &(0x7f0000000100)=0x4)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:31 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xc000000000000000]}}}}, 0x48)

23:59:31 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe1ff0000}})

[ 1163.014085] binder: 8682:8684 transaction failed 29201/-22, size 64-8 line 3030
[ 1163.036688] binder_alloc: binder_alloc_mmap_handler: 8682 20001000-20004000 already mapped failed -16
[ 1163.044141] binder_alloc: binder_alloc_mmap_handler: 8680 20001000-20004000 already mapped failed -16
[ 1163.048180] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:31 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x28]}, 0x6)

23:59:31 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000180)="0205000000101707d7939fe60d0b4ba744f48f3203c9383dafc75c6d3efbf21440232b70a24bb4a743598c5789618f0273082235d602ef0004000000000000a4f9619ff9412409b46bb96666686c06cb3baad92f170795e4878200000000dab2e96f9b9a9799b61e28bc04ef0000000032de0000000000d05b5793660842aeb08973")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:32 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x4000000]}}}}, 0x48)

[ 1163.079211] binder: BINDER_SET_CONTEXT_MGR already set
[ 1163.090641] binder: 8682:8684 ioctl 40046207 0 returned -16
[ 1163.104963] binder: BINDER_SET_CONTEXT_MGR already set
[ 1163.116137] binder_alloc: 8682: binder_alloc_buf, no vma
[ 1163.121752] binder: 8682:8697 transaction failed 29189/-3, size 64-8 line 2967
[ 1163.135659] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1163.144629] binder: 8680:8688 ioctl 40046207 0 returned -16
23:59:32 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:32 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xff00}})

[ 1163.177132] binder: undelivered TRANSACTION_ERROR: 29201
[ 1163.186550] binder: undelivered TRANSACTION_ERROR: 29189
[ 1163.273105] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1163.354611] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:32 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x15555555555555bd, 0x9)
r2 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @multicast2, <r3=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', r3})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:32 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x55320200]}}}}, 0x48)

23:59:32 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x280000)
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x1014, 0x1f, 0x800, 0x70bd25, 0x25dfdbff, {0x3}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x804}, 0x80)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:32 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:32 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x40020000]}, 0x6)

23:59:32 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:32 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x700}})

23:59:32 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x121000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000080)={0x100, 0x0, 'client0\x00', 0x4, "8133ffa438d03a91", "fb66ffa08954b57077020e497c6f6e55919d2143bce112581af84b39093e1a2f", 0x8, 0x10001})
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1163.912500] binder: 8737:8745 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1163.913725] binder: BINDER_SET_CONTEXT_MGR already set
[ 1163.951655] binder: 8737:8745 transaction failed 29201/-22, size 64-8 line 3030
23:59:32 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x300]}}}}, 0x48)

23:59:32 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdcff}})

23:59:32 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x142800]}, 0x6)

[ 1163.986386] binder_alloc: binder_alloc_mmap_handler: 8737 20001000-20004000 already mapped failed -16
[ 1163.986395] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1163.991161] binder: 8741:8744 ioctl 40046207 0 returned -16
23:59:32 executing program 4:
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f00000000c0)="6e65742f7463703693")
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)=0x8)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000100)=0xc)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:32 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd4ff000000000000}})

[ 1164.039093] binder: BINDER_SET_CONTEXT_MGR already set
[ 1164.054679] binder: 8737:8745 ioctl 40046207 0 returned -16
23:59:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xd00]}}}}, 0x48)

[ 1164.081136] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1164.084916] binder_alloc: binder_alloc_mmap_handler: 8741 20001000-20004000 already mapped failed -16
[ 1164.095952] binder_alloc: 8737: binder_alloc_buf, no vma
[ 1164.105795] binder: 8737:8759 transaction failed 29189/-3, size 64-8 line 2967
23:59:33 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10001, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[{0x4, 0x9b000000000}], 0x1)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
r3 = shmget$private(0x0, 0x2000, 0x9, &(0x7f0000ffc000/0x2000)=nil)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r4=>0x0}, &(0x7f0000000100)=0xc)
getresgid(&(0x7f0000000140), &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0))
stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getresgid(&(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)=<r7=>0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=<r8=>0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=<r9=>0x0)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000580)={{0x2, r4, r5, r6, r7, 0x2, 0xfeaa}, 0xffff, 0x7, 0x9, 0x9, r8, r9, 0x38a2})
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1164.131643] binder: BINDER_SET_CONTEXT_MGR already set
[ 1164.156091] binder: 8741:8744 ioctl 40046207 0 returned -16
[ 1164.174448] binder: undelivered TRANSACTION_ERROR: 29189
[ 1164.187568] binder: undelivered TRANSACTION_ERROR: 29201
23:59:33 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x40, 0x40)
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000300)=""/228)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000000c0))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:33 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6800, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:33 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x2]}, 0x6)

23:59:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xc]}}}}, 0x48)

23:59:33 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x900000000000000}})

23:59:33 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x66646185, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:33 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:33 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x5, 0x4)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1164.934897] binder: BINDER_SET_CONTEXT_MGR already set
[ 1164.941506] binder: 8791:8793 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1164.950483] binder: 8794:8795 ioctl 40046207 0 returned -16
23:59:33 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffffffffffc, 0x10000010800)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x100)
write$P9_RSTATFS(r2, &(0x7f0000000080)={0x43, 0x9, 0x1, {0x20, 0x0, 0x5, 0x7, 0x80000001, 0x8, 0x0, 0x3, 0x2}}, 0x43)

23:59:33 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1f00000000000000}})

23:59:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf0ffffff0f0000]}}}}, 0x48)

[ 1164.982788] binder: 8794:8795 ioctl c0306202 20007000 returned -22
[ 1164.991306] binder: 8791:8793 transaction failed 29201/-22, size 64-8 line 3030
[ 1165.011445] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1165.020992] binder_alloc: binder_alloc_mmap_handler: 8794 20001000-20004000 already mapped failed -16
23:59:33 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe803]}, 0x6)

23:59:33 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x204000000000000, &(0x7f0000000280)="025cc83d6d345f8f7620ea")
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4807e)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1165.026175] binder_alloc: binder_alloc_mmap_handler: 8791 20001000-20004000 already mapped failed -16
[ 1165.042756] binder: BINDER_SET_CONTEXT_MGR already set
[ 1165.042850] binder: 8794:8813 ioctl c0306202 20007000 returned -22
[ 1165.049436] binder: BINDER_SET_CONTEXT_MGR already set
[ 1165.059090] binder: 8794:8795 ioctl 40046207 0 returned -16
[ 1165.061982] binder_alloc: 8791: binder_alloc_buf, no vma
[ 1165.071576] binder: 8791:8816 transaction failed 29189/-3, size 64-8 line 2967
23:59:34 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:34 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1165.079751] binder: 8791:8793 ioctl 40046207 0 returned -16
[ 1165.087394] binder: undelivered TRANSACTION_ERROR: 29201
[ 1165.094961] binder: undelivered TRANSACTION_ERROR: 29189
23:59:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x8008]}}}}, 0x48)

[ 1165.166978] binder: 8830:8832 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1165.175745] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1165.190398] binder: BINDER_SET_CONTEXT_MGR already set
[ 1165.190932] binder: 8830:8832 transaction failed 29201/-22, size 64-8 line 3030
[ 1165.211568] binder: 8834:8835 ioctl 40046207 0 returned -16
[ 1165.230345] binder_alloc: binder_alloc_mmap_handler: 8830 20001000-20004000 already mapped failed -16
[ 1165.232239] binder_alloc: binder_alloc_mmap_handler: 8834 20001000-20004000 already mapped failed -16
[ 1165.250201] binder: BINDER_SET_CONTEXT_MGR already set
[ 1165.256015] binder: 8830:8832 ioctl 40046207 0 returned -16
[ 1165.262062] binder: BINDER_SET_CONTEXT_MGR already set
[ 1165.274102] binder_alloc: 8830: binder_alloc_buf, no vma
[ 1165.279823] binder: 8830:8839 transaction failed 29189/-3, size 64-8 line 2967
[ 1165.287336] binder: 8834:8835 ioctl 40046207 0 returned -16
[ 1165.294779] binder: undelivered TRANSACTION_ERROR: 29201
[ 1165.301147] binder: undelivered TRANSACTION_ERROR: 29189
23:59:34 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={<r2=>r0})
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000000c0)={0xff, {{0xa, 0x4e21, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x37}}}, 0x88)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:34 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x119000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{0x306a, 0x134}, 'port0\x00', 0x12, 0x1000, 0x100000001, 0xa69, 0x3ff, 0xfffffffffffffffa, 0x5, 0x0, 0x3, 0x9})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
r6 = semget(0x0, 0x2, 0x4)
semtimedop(r6, &(0x7f00000000c0)=[{0x3, 0x4, 0x1800}], 0x1, &(0x7f0000000100)={0x0, 0x989680})
ioctl$KVM_NMI(r5, 0xae9a)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:34 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd9ff000000000000}})

23:59:34 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x8000000000000000]}, 0x6)

23:59:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xc0000000]}}}}, 0x48)

23:59:34 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:34 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:34 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xff01]}}}}, 0x48)

[ 1166.005840] binder: 8852:8854 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1166.017077] binder: BINDER_SET_CONTEXT_MGR already set
[ 1166.029139] binder: 8852:8854 transaction failed 29201/-22, size 64-8 line 3030
[ 1166.045481] binder: 8856:8857 ioctl 40046207 0 returned -16
23:59:34 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffd8}})

[ 1166.069310] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1166.069666] binder_alloc: binder_alloc_mmap_handler: 8852 20001000-20004000 already mapped failed -16
[ 1166.095251] binder_alloc: binder_alloc_mmap_handler: 8856 20001000-20004000 already mapped failed -16
23:59:35 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x1c, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x3)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:35 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xa]}, 0x6)

[ 1166.124153] binder: BINDER_SET_CONTEXT_MGR already set
23:59:35 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x2000]}}}}, 0x48)

23:59:35 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x700000000000000}})

23:59:35 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:35 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
pause()
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1166.153611] binder: 8856:8857 ioctl 40046207 0 returned -16
[ 1166.170828] binder: BINDER_SET_CONTEXT_MGR already set
[ 1166.188073] binder: 8852:8854 ioctl 40046207 0 returned -16
[ 1166.218630] binder_alloc: 8852: binder_alloc_buf, no vma
[ 1166.224249] binder: 8852:8865 transaction failed 29189/-3, size 64-8 line 2967
[ 1166.268255] binder: undelivered TRANSACTION_ERROR: 29201
[ 1166.274857] binder: undelivered TRANSACTION_ERROR: 29189
[ 1166.295112] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1166.329586] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:35 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x38603037dbbab426)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@int=0x7, 0x4)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:35 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x400000000000000]}, 0x6)

23:59:35 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045877, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:35 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x8000000000000000]}}}}, 0x48)

23:59:35 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:35 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd5ff000000000000}})

23:59:35 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1166.959957] binder: 8901:8902 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1166.973142] binder: BINDER_SET_CONTEXT_MGR already set
[ 1166.985469] binder: 8900:8903 ioctl 40046207 0 returned -16
[ 1166.996126] binder: 8901:8902 transaction failed 29201/-22, size 64-8 line 3030
23:59:35 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x30000000]}}}}, 0x48)

23:59:35 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdcff000000000000}})

[ 1167.003883] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1167.003883] 
[ 1167.015472] binder_alloc: binder_alloc_mmap_handler: 8901 20001000-20004000 already mapped failed -16
[ 1167.025884] binder_alloc: binder_alloc_mmap_handler: 8900 20001000-20004000 already mapped failed -16
[ 1167.044551] binder: BINDER_SET_CONTEXT_MGR already set
23:59:35 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x3000000]}, 0x6)

[ 1167.064103] binder: BINDER_SET_CONTEXT_MGR already set
[ 1167.077345] binder: 8900:8903 ioctl 40046207 0 returned -16
[ 1167.096215] binder: 8901:8902 ioctl 40046207 0 returned -16
[ 1167.096380] binder_alloc: 8901: binder_alloc_buf, no vma
23:59:35 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xd000000]}}}}, 0x48)

23:59:36 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:36 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1167.107922] binder: 8901:8930 transaction failed 29189/-3, size 64-8 line 2967
[ 1167.115511] REISERFS warning (device loop0): super-6508 reiserfs_parse_options: bad value x for -ocommit
[ 1167.115511] 
[ 1167.132830] binder: undelivered TRANSACTION_ERROR: 29189
[ 1167.147909] binder: undelivered TRANSACTION_ERROR: 29201
23:59:36 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1400]}, 0x6)

23:59:36 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffe, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1167.204039] binder: 8942:8944 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1167.221762] binder: BINDER_SET_CONTEXT_MGR already set
[ 1167.230737] binder: 8941:8943 ioctl 40046207 0 returned -16
[ 1167.236932] binder: 8942:8944 transaction failed 29201/-22, size 64-8 line 3030
[ 1167.248844] binder_alloc: binder_alloc_mmap_handler: 8941 20001000-20004000 already mapped failed -16
[ 1167.253452] binder_alloc: binder_alloc_mmap_handler: 8942 20001000-20004000 already mapped failed -16
[ 1167.273395] binder: BINDER_SET_CONTEXT_MGR already set
[ 1167.279201] binder: BINDER_SET_CONTEXT_MGR already set
[ 1167.284760] binder: 8941:8943 ioctl 40046207 0 returned -16
[ 1167.290698] binder: 8942:8944 ioctl 40046207 0 returned -16
[ 1167.297610] binder_alloc: 8942: binder_alloc_buf, no vma
23:59:36 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2082, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1167.303194] binder: 8942:8950 transaction failed 29189/-3, size 64-8 line 2967
[ 1167.333725] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1167.339254] binder: undelivered TRANSACTION_ERROR: 29201
[ 1167.353936] binder: undelivered TRANSACTION_ERROR: 29189
23:59:36 executing program 1:
r0 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080))
epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000440)={0x7})

23:59:36 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3f00}})

23:59:36 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x12]}}}}, 0x48)

23:59:36 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe]}, 0x6)

23:59:36 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:36 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x77622a85, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:36 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224", [0x0, 0x1]})

23:59:36 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc0ed0000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1167.939688] binder: 8970:8972 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1167.945698] binder: BINDER_SET_CONTEXT_MGR already set
23:59:36 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x23)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:36 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xd]}}}}, 0x48)

23:59:36 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x10000000}})

[ 1167.990127] binder: 8970:8972 transaction failed 29201/-22, size 64-8 line 3030
[ 1167.994173] binder: 8965:8967 ioctl 40046207 0 returned -16
[ 1168.018757] binder: 8965:8967 ioctl c0306225 20007000 returned -22
[ 1168.026533] binder_alloc: binder_alloc_mmap_handler: 8965 20001000-20004000 already mapped failed -16
23:59:36 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x1, 0x2, 0x3, 0x80ff, <r2=>0x0}, &(0x7f0000000280)=0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000300)={r2, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80, 0x0)
getpeername$netlink(r3, &(0x7f0000000100), &(0x7f0000000140)=0xc)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000003c0)={0x7})
rt_sigpending(&(0x7f0000000000), 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000400)=0x3)
ioctl(r0, 0x0, &(0x7f0000000480)="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")

23:59:36 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x281400]}, 0x6)

[ 1168.036636] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1168.054135] binder: BINDER_SET_CONTEXT_MGR already set
[ 1168.068902] binder_alloc: binder_alloc_mmap_handler: 8970 20001000-20004000 already mapped failed -16
[ 1168.070530] binder: 8965:8967 ioctl 40046207 0 returned -16
[ 1168.092774] binder: 8965:8984 ioctl c0306225 20007000 returned -22
23:59:37 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:37 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffffff8c}})

23:59:37 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x181000, 0x0)
ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/6)

23:59:37 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x40000]}}}}, 0x48)

[ 1168.136232] binder: BINDER_SET_CONTEXT_MGR already set
[ 1168.152733] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1168.173990] binder: BINDER_SET_CONTEXT_MGR already set
[ 1168.175279] binder: 8970:8972 ioctl 40046207 0 returned -16
23:59:37 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x3ff, 0x101000)
r2 = dup2(r0, r1)
connect$netlink(r2, &(0x7f0000000180)=@unspec, 0xc)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0)
ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000080)=""/211)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xbb, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c)

23:59:37 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1f4]}, 0x6)

23:59:37 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xff00000000000000}})

23:59:37 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1168.195112] binder: 9008:9009 ioctl 40046207 0 returned -16
[ 1168.206784] binder_alloc: 8970: binder_alloc_buf, no vma
[ 1168.212416] binder: 8970:8992 transaction failed 29189/-3, size 64-8 line 2967
[ 1168.220718] binder: 9008:9009 ioctl c0306203 20007000 returned -22
[ 1168.261170] binder_alloc: binder_alloc_mmap_handler: 9008 20001000-20004000 already mapped failed -16
[ 1168.289379] binder: BINDER_SET_CONTEXT_MGR already set
23:59:37 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101000, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r1)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={<r2=>0x0, 0x401}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x2}, 0x8)
readv(r1, &(0x7f0000002700)=[{&(0x7f0000000140)=""/235, 0xeb}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000580)=""/202, 0xca}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/111, 0x6f}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x7)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000002780)=""/4096)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
sendto$unix(r1, &(0x7f0000000240)="025b9d5a3344d73d962b4f7b68bd63b90e4fb9", 0x13, 0x44090, 0x0, 0x0)
shmget$private(0x0, 0x3000, 0x88, &(0x7f0000ffa000/0x3000)=nil)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000440))
ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:37 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xff000000]}}}}, 0x48)

23:59:37 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdfff}})

23:59:37 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x852a646600000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:37 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x2000000000000]}, 0x6)

[ 1168.309400] binder: 9008:9009 ioctl 40046207 0 returned -16
[ 1168.314682] binder: undelivered TRANSACTION_ERROR: 29201
[ 1168.321263] binder: undelivered TRANSACTION_ERROR: 29189
23:59:37 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffd4}})

[ 1168.358991] binder: 9008:9032 ioctl c0306203 20007000 returned -22
[ 1168.370453] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1168.390960] binder: 9039:9043 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1168.446713] binder: 9039:9043 transaction failed 29201/-22, size 64-8 line 3030
[ 1168.465457] binder_alloc: binder_alloc_mmap_handler: 9039 20001000-20004000 already mapped failed -16
[ 1168.475316] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1168.487083] binder: BINDER_SET_CONTEXT_MGR already set
[ 1168.493403] binder: 9039:9043 ioctl 40046207 0 returned -16
[ 1168.513154] binder_alloc: 9039: binder_alloc_buf, no vma
[ 1168.518730] binder: 9039:9051 transaction failed 29189/-3, size 64-8 line 2967
[ 1168.535199] binder: undelivered TRANSACTION_ERROR: 29201
[ 1168.542263] binder: undelivered TRANSACTION_ERROR: 29189
23:59:37 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x240101, 0x0)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0))
ioctl$KDDISABIO(r2, 0x4b37)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={<r3=>0x0, 0x1}, &(0x7f0000000140)=0xc)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x4}, &(0x7f0000000280)=0x8)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:37 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x5, &(0x7f0000000080)="8100810000000000000070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:37 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x4800]}}}}, 0x48)

23:59:37 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:37 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x200000000000000]}, 0x6)

23:59:37 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x13010000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:37 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdeff000000000000}})

23:59:37 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:37 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x3ebf, 0x4400)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r2=>0xffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r2, 0x86, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xfffffffffffffffc, @loopback={0x0, 0x1}, 0x5}, @ib={0x1b, 0x2d, 0x800, {"f23fe3b0144fbfed1f2d3767d3191aa0"}, 0x7, 0x9, 0x6}}}, 0x118)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:37 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xfffffffe]}}}}, 0x48)

[ 1169.019412] binder: 9064:9066 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1169.025743] binder: BINDER_SET_CONTEXT_MGR already set
[ 1169.056284] binder: 9059:9069 ioctl 40046207 0 returned -16
23:59:37 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x8055000000000000]}, 0x6)

23:59:37 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdfff0000}})

[ 1169.091859] binder: 9064:9066 transaction failed 29201/-22, size 64-8 line 3030
[ 1169.107528] binder_alloc: binder_alloc_mmap_handler: 9059 20001000-20004000 already mapped failed -16
[ 1169.113818] binder_alloc: binder_alloc_mmap_handler: 9064 20001000-20004000 already mapped failed -16
[ 1169.129603] binder: BINDER_SET_CONTEXT_MGR already set
23:59:38 executing program 4:
syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7ff, 0x12000)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1169.147880] binder: 9059:9069 ioctl 40046207 0 returned -16
[ 1169.155872] binder: BINDER_SET_CONTEXT_MGR already set
[ 1169.166326] binder: 9064:9066 ioctl 40046207 0 returned -16
23:59:38 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x1000000000000]}}}}, 0x48)

23:59:38 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xeffe000000000000]}, 0x6)

23:59:38 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x2000}})

[ 1169.188898] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1169.191354] binder_alloc: 9064: binder_alloc_buf, no vma
[ 1169.203847] binder: 9064:9082 transaction failed 29189/-3, size 64-8 line 2967
[ 1169.273147] binder: undelivered TRANSACTION_ERROR: 29201
[ 1169.282989] binder: undelivered TRANSACTION_ERROR: 29189
23:59:38 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x40000004})
clone(0x8000, &(0x7f0000000300)="e64d8c884d035437b24485b29084bfa454e6633d400ffeee8435c5a829102e740f933e1d4675e12b8e8b019b366a64c77d0674b8f872df586baf347c0f0d04a6e382ff9b7ddffcf1cc78d4e55125ac7556c96a8bb87e4ea6d420ec19e6c1b28b9baba62f3a1472113f8a05a2aff4bf507985517daf2b17c882f9bb318cc1f66a8eb7f1b526bdbcea6b0b64d4cc262be4b973469cf617d418b803a34dda8ef33d5578c167c86a4912fd9e806a31d7342545013727ad96167d230631ce725ef3af8133c3a648e031b89c670aa66fdbe1a187de3dc92f08c5e84b322d1aad4bf9272afabcc2eb1cb5c3f8155eb9fc3e5014e50298286f1a82", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000480)="f37390c54e68fb3dccf3ad7bab151d28ab6d6ec2fb9c67fce765755b5790159a2e82c9b059c30ce0044a834ccdf4b6b0e520de0ca476547912f1d8361e6001c444d4a858b69c537e2be610a33648e5546a2bbb62c8e781ceb1c26281a1600a1872edb2cf607ddff299769bb053f00c787393d5f3619338b4486627ab473c6926fc8a7cf4618cc0c41328bd7adebaf1619327bebb6e0a9f9ac79eb8fe8050813627ce55b394d14a3dc60a9cdf90c51f8a05c74f")
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
prctl$setfpexc(0xc, 0x2)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x2012})

23:59:38 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:38 executing program 4:
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x40000)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x2, 0x3ff, 0x7})
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e20, @loopback=0x7f000001}, {0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x4, {0x2, 0x4e21, @multicast1=0xe0000001}, 'vlan0\x00'})
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
ioctl$sock_ifreq(r0, 0x89f7, &(0x7f00000000c0)={'ip6gretap0\x00', @ifru_flags=0x2000})

23:59:38 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff7f, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:38 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x300000000000000]}}}}, 0x48)

23:59:38 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x852a6877, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:38 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1400000000000000]}, 0x6)

23:59:38 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffffff7f}})

[ 1170.098353] binder: BINDER_SET_CONTEXT_MGR already set
[ 1170.105581] binder_alloc: binder_alloc_mmap_handler: 9114 20001000-20004000 already mapped failed -16
[ 1170.134882] binder: BINDER_SET_CONTEXT_MGR already set
[ 1170.142155] binder: 9115:9119 ioctl 40046207 0 returned -16
23:59:39 executing program 4:
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0)
mq_notify(r1, &(0x7f00000000c0)={0x0, 0xa, 0x7, @thr={&(0x7f0000000580)="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", &(0x7f0000000080)="2d2aeb3a423160"}})

23:59:39 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x800000]}}}}, 0x48)

[ 1170.155443] binder: 9114:9116 ioctl 40046207 0 returned -16
[ 1170.161652] binder_alloc: 9114: binder_alloc_buf, no vma
[ 1170.167199] binder: 9115:9119 transaction failed 29189/-3, size 64-8 line 2967
[ 1170.175886] binder_alloc: binder_alloc_mmap_handler: 9115 20001000-20004000 already mapped failed -16
[ 1170.181446] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1170.194800] binder_alloc: 9115: binder_alloc_buf, no vma
23:59:39 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf0ffffff00000000}})

23:59:39 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:39 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xffffffffffffffff]}, 0x6)

23:59:39 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1170.194827] binder: 9115:9134 transaction failed 29189/-3, size 64-8 line 2967
[ 1170.199777] binder: undelivered TRANSACTION_ERROR: 29189
[ 1170.230608] binder: undelivered TRANSACTION_ERROR: 29189
23:59:39 executing program 4:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@in={0x0, 0x0, @multicast2}, &(0x7f0000000180)=0x80, 0x80800)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x101012, r0, 0x45)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x3)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x404400, 0x0)
ioctl$KDMKTONE(r3, 0x4b30, 0x8)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000080)={0x20000007, 0x100000000})

[ 1170.256190] binder_alloc: binder_alloc_mmap_handler: 9140 20001000-20004000 already mapped failed -16
[ 1170.285210] binder: BINDER_SET_CONTEXT_MGR already set
23:59:39 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x4000000000000}})

[ 1170.302304] binder: BINDER_SET_CONTEXT_MGR already set
[ 1170.311322] binder: 9147:9148 ioctl 40046207 0 returned -16
[ 1170.317278] binder: 9140:9142 ioctl 40046207 0 returned -16
[ 1170.324732] QAT: Invalid ioctl
[ 1170.330157] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1170.353610] binder: 9147:9148 transaction failed 29189/-22, size 64-8 line 2852
[ 1170.385297] binder_alloc: binder_alloc_mmap_handler: 9147 20001000-20004000 already mapped failed -16
[ 1170.416927] binder_alloc: 9147: binder_alloc_buf, no vma
[ 1170.422537] binder: 9147:9162 transaction failed 29189/-3, size 64-8 line 2967
[ 1170.435687] binder: undelivered TRANSACTION_ERROR: 29189
[ 1170.442456] binder: undelivered TRANSACTION_ERROR: 29189
23:59:39 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2})
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:39 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf0ffff]}}}}, 0x48)

23:59:39 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xc900]}, 0x6)

23:59:39 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306254, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:39 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3e4, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:39 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x18)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:39 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x800000000000000}})

23:59:39 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x77682a85, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1171.143528] binder: 9176:9179 ioctl c0306254 20007000 returned -22
[ 1171.145672] binder: BINDER_SET_CONTEXT_MGR already set
[ 1171.162872] binder: 9170:9177 ioctl 40046207 0 returned -16
[ 1171.181870] binder: 9170:9177 got transaction with invalid offset (0, min 0 max 64) or object.
23:59:40 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340)=@int=0x3, 0x4)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='/dev/loop#\x00', 0xffffffffffffff9c}, 0x10)
sendfile(r0, r0, &(0x7f0000000080), 0x9)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r2=>0xffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x7e4, r2, 0x0, 0x0, 0x1}}, 0x20)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "009184a46122cd3b999cbc6b7d0c0224000000000700"})
bind(r0, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast=0xffffffff}, 0x4, 0x4, 0x4, 0x4}}, 0x80)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x4b0100, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000440)=ANY=[@ANYRES32=<r5=>0x0, @ANYBLOB="2b000096ae000a66000000000000000000a43527c850dff4d7000000"], &(0x7f00000000c0)=0x18)
setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r5, 0xe37}, 0x8)
accept4$inet(r4, 0x0, &(0x7f0000000300), 0x80000)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000580)={0x5, {{0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88)

23:59:40 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1000000000}})

23:59:40 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x80000000000000]}}}}, 0x48)

[ 1171.193924] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1171.195463] binder_alloc: binder_alloc_mmap_handler: 9176 20001000-20004000 already mapped failed -16
[ 1171.222494] binder: 9170:9177 transaction failed 29201/-22, size 64-8 line 3030
[ 1171.231052] binder: BINDER_SET_CONTEXT_MGR already set
[ 1171.236618] binder: 9176:9189 ioctl c0306254 20007000 returned -22
23:59:40 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xcbff]}, 0x6)

23:59:40 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff8c, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1171.244950] binder_alloc: binder_alloc_mmap_handler: 9170 20001000-20004000 already mapped failed -16
[ 1171.260921] binder: BINDER_SET_CONTEXT_MGR already set
[ 1171.267444] binder: 9176:9179 ioctl 40046207 0 returned -16
[ 1171.273955] binder: 9170:9177 ioctl 40046207 0 returned -16
[ 1171.280853] binder_alloc: 9176: binder_alloc_buf, no vma
[ 1171.286440] binder: 9170:9192 transaction failed 29189/-3, size 64-8 line 2967
23:59:40 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:40 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x6c69662f}})

23:59:40 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xd00000000000000]}}}}, 0x48)

[ 1171.350294] binder: undelivered TRANSACTION_ERROR: 29201
[ 1171.356799] binder: undelivered TRANSACTION_ERROR: 29189
[ 1171.386888] binder: BINDER_SET_CONTEXT_MGR already set
[ 1171.401085] binder: 9210:9212 ioctl 40046207 20007000 returned -16
[ 1171.421230] binder_alloc: binder_alloc_mmap_handler: 9210 20001000-20004000 already mapped failed -16
[ 1171.438621] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1171.445099] binder: BINDER_SET_CONTEXT_MGR already set
[ 1171.453360] binder: BINDER_SET_CONTEXT_MGR already set
[ 1171.453772] binder: 9210:9212 ioctl 40046207 0 returned -16
[ 1171.464854] binder: 9210:9215 ioctl 40046207 20007000 returned -16
[ 1171.499209] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:40 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000480)='/dev/snd/controlC#\x00', 0x6, 0x8200)
r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10001, 0x28)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xd0, r3, 0x8, 0x70bd29, 0x25dfdbfb, {0xb}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
prctl$setfpexc(0xc, 0x130080)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000004c0)={{0x7, 0x698000000000000}, 'port1\x00', 0x3f, 0x80020, 0xfffffffffffffffe, 0x9, 0x8, 0x2, 0x401, 0x0, 0x1, 0xb5})

23:59:40 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x3)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x1, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)=""/147, &(0x7f0000000180)=0x93)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x54000, 0x8)
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10200, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x4000, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x92e)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22}, 0x10)

23:59:40 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4002]}, 0x6)

23:59:40 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xffffffff00000000]}}}}, 0x48)

23:59:40 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x70742a85, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:40 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffda}})

23:59:40 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:40 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3d8, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1172.064581] binder: BINDER_SET_CONTEXT_MGR already set
[ 1172.071927] binder: 9226:9227 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1172.102594] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x7]}}}}, 0x48)

[ 1172.105063] binder: 9228:9229 ioctl 40046207 0 returned -16
[ 1172.120403] binder: 9226:9227 transaction failed 29201/-22, size 64-8 line 3030
23:59:41 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x9000000]}, 0x6)

23:59:41 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfffffff4}})

23:59:41 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x20)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1172.157140] binder_alloc: binder_alloc_mmap_handler: 9226 20001000-20004000 already mapped failed -16
[ 1172.166959] binder: BINDER_SET_CONTEXT_MGR already set
[ 1172.169931] binder_alloc: binder_alloc_mmap_handler: 9228 20001000-20004000 already mapped failed -16
[ 1172.178151] binder: 9228:9229 ioctl 40046207 0 returned -16
[ 1172.189653] binder: BINDER_SET_CONTEXT_MGR already set
23:59:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x1000000000000000]}}}}, 0x48)

[ 1172.214087] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1172.216733] binder: 9226:9227 ioctl 40046207 0 returned -16
23:59:41 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x900000000000000]}, 0x6)

23:59:41 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x9, 0xf94, 0xffffffff00000000}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r1, 0xbb, "4250bba3b581d4a7ad2618bdff0a9afcddd0aed52fd4d0428781d3b7316cbe51e5b37e6c6e41ed9cafbc7be5214e132b839878a121a74949bc5d47c2bc8c3c36f5e79eec7d2db7379e5609cbf69e4f33134d77a6ef6c7a84d5cdb00e9e9e254388b2b7af8337bff818ce1c35a644cddad7526fc6e66a3ab4615b6cdff95749e22a262e446956c7f6990b007d150f01ac4686f7d6c3bdb5afaf160fb669620bf8802b5714cc5c53d05afbb8206d462a74a29d020fabe2915628da18"}, &(0x7f00000001c0)=0xc3)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r3 = semget(0x3, 0x3, 0x204)
r4 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x200, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0x50, &(0x7f00000002c0)}, 0x10)
semop(r3, &(0x7f0000000200)=[{0x7, 0x8, 0x1000}, {0x3, 0x3, 0x1000}, {0x3, 0x9, 0x1000}], 0x3)

23:59:41 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x4}})

[ 1172.290333] binder_alloc: 9226: binder_alloc_buf, no vma
[ 1172.295985] binder: 9226:9268 transaction failed 29189/-3, size 64-8 line 2967
[ 1172.340656] binder: undelivered TRANSACTION_ERROR: 29189
[ 1172.347709] binder: undelivered TRANSACTION_ERROR: 29201
23:59:41 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x84800)
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
write$sndseq(r2, &(0x7f0000000480)=[{0x0, 0x4, 0x5e1, 0x8001, @time={0x0, 0x989680}, {0x652, 0xffff}, {0xd9, 0x81}, @raw32={[0x8, 0x6, 0x7ff]}}, {0x100000000, 0x949d, 0x8000, 0x0, @time={r3, r4+30000000}, {0x9, 0x7fffffff}, {0x75e, 0x6}, @ext={0x7d, &(0x7f0000000100)="5c4f3435a113b1a7170a18e6491fccc47ae39825be5c0d8c433a7d4dca58bb37c9f708b2474b40ef13f7db7a853a327d04ca63de107c866f1ce2187723239170f90570da2404052707d309bcda7228313c504ad6411ca9b42bf7f8e72730223597a4353f4aaf2746563a7a16bebe679e3953dad0b291000bdf61fe8992"}}, {0x2, 0xfc76, 0x9ab, 0x7, @time, {0x1f, 0x9}, {0xe671, 0x3}, @ext={0xe2, &(0x7f0000000300)="10275dffc3dfa6da70d76387aece3779aaa5389513b1437be10ecd3ed7e5797d44fd5bdbe13a2478f180bab9632add93b4ac6e9c9215286bbe820f3cd9f562ba970c5429b364f46b85ca03539741ecb1587f7bed2a903234e546fe7117fc3e794c485276cdf6886bdab1de43e407797903e91b79a85d8a1c227965d4df6a63542d54c30215d3c2aa4a16279f2d3da0676a174440828c207650d8045d59096416baa8a52a8e2a3f5b4b2cc55faeaae4faaa363a4fec75c2c0496bda0952210f78e3167b97cdeb6878e15bc622d4b776a3a7fd50140e1853700f12ff56a1030acd7dc5"}}, {0x6, 0x1, 0xfffffffffffffff7, 0x836, @tick=0xffff, {0x4, 0x3a9}, {0x101, 0xfb0}, @note={0x8, 0x0, 0x7fffffff, 0x9, 0x80000001}}, {0x400000000, 0xfec, 0x7ff, 0x8, @tick, {0x0, 0x8000}, {0xfffffffffffffffe, 0x51da}, @raw8={"53f18eaa34fcbc3cb4c83d07"}}], 0xf0)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:41 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:41 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf00000000000000]}}}}, 0x48)

23:59:41 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xa00000000000000]}, 0x6)

23:59:41 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x852a627300000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:41 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1f000000}})

23:59:41 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00')
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={<r2=>0x0, 0x5, "d55239d992"}, &(0x7f00000000c0)=0xd)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0x8}, &(0x7f0000000140)=0x8)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1173.037646] binder: 9284:9285 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1173.043829] binder: BINDER_SET_CONTEXT_MGR already set
[ 1173.061415] binder: 9284:9285 transaction failed 29201/-22, size 64-8 line 3030
[ 1173.081294] binder: 9295:9297 ioctl 40046207 0 returned -16
23:59:41 executing program 4:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x8000, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000400)={<r1=>0x0, 0x1ff, 0x2, 0x5, 0x0, 0x8}, &(0x7f0000000440)=0x14)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r1, 0x7fff}, 0xffad)
r2 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x80000)
recvfrom$llc(r2, &(0x7f00000001c0)=""/192, 0xc0, 0x40010041, &(0x7f00000002c0)={0x1a, 0x334, 0x367, 0x4, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800001081, 0x82)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x7dd, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x800, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e23, 0x401, @mcast1={0xff, 0x1, [], 0x1}, 0x80000001}, @in6={0xa, 0x4e24, 0x40, @empty, 0x4}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x291, @loopback={0x0, 0x1}}], 0x90)
ioctl$LOOP_SET_STATUS64(r4, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:42 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd7ff}})

23:59:42 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x200000]}}}}, 0x48)

[ 1173.096406] binder_alloc: binder_alloc_mmap_handler: 9284 20001000-20004000 already mapped failed -16
[ 1173.103147] binder_alloc: binder_alloc_mmap_handler: 9295 20001000-20004000 already mapped failed -16
[ 1173.115727] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1173.120904] binder: BINDER_SET_CONTEXT_MGR already set
[ 1173.135539] binder: BINDER_SET_CONTEXT_MGR already set
[ 1173.136518] binder: 9284:9285 ioctl 40046207 0 returned -16
23:59:42 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x3]}, 0x6)

[ 1173.141620] binder: 9295:9297 ioctl 40046207 0 returned -16
[ 1173.153658] binder_alloc: 9284: binder_alloc_buf, no vma
[ 1173.159268] binder: 9284:9304 transaction failed 29189/-3, size 64-8 line 2967
[ 1173.182351] binder: undelivered TRANSACTION_ERROR: 29201
23:59:42 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1173.197008] binder: undelivered TRANSACTION_ERROR: 29189
23:59:42 executing program 4:
r0 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x80000)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1ff, 0x4)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80000, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={<r3=>0x0, 0x7ac3}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x68, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x17}, 0x1}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e21, 0x77, @remote={0xfe, 0x80, [], 0xbb}, 0x1000}, @in={0x2, 0x4e24}]}, &(0x7f0000000340)=0x10)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180))
r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x100000001, 0x85)
ioctl$LOOP_SET_STATUS64(r4, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:42 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:42 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x5]}}}}, 0x48)

[ 1173.240007] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1173.261485] binder_alloc: binder_alloc_mmap_handler: 9323 20001000-20004000 already mapped failed -16
[ 1173.285534] binder: BINDER_SET_CONTEXT_MGR already set
[ 1173.312297] binder: BINDER_SET_CONTEXT_MGR already set
[ 1173.326986] binder: 9323:9324 ioctl 40046207 0 returned -16
[ 1173.339710] binder: 9330:9331 ioctl 40046207 0 returned -16
[ 1173.352213] binder: 9330:9331 transaction failed 29189/-22, size 64-8 line 2852
[ 1173.375433] binder_alloc: binder_alloc_mmap_handler: 9330 20001000-20004000 already mapped failed -16
[ 1173.387096] binder: 9330:9335 transaction failed 29189/-22, size 64-8 line 2852
[ 1173.395989] binder: undelivered TRANSACTION_ERROR: 29189
[ 1173.402469] binder: undelivered TRANSACTION_ERROR: 29189
23:59:42 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x40)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={<r3=>0xffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x1, 0x0, [0x80, 0x0, 0xad90, 0x40, 0x9, 0x3, 0x80000001, 0x4, 0x3, 0xfc, 0x8, 0x5, 0x1, 0x7, 0x8, 0x3]}], r3, 0x1, 0x1, 0x48}}, 0x20)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r2, &(0x7f0000000300)={'syz0', "dba68db0801e0c6ebb926bde5bb037f246bc67333979e00a7bf92be6ba60e7f168ae0d8839c590892498c63be30b84398d40b860169fc816"}, 0x3c)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:42 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x2}})

23:59:42 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x3000000]}, 0x6)

23:59:42 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4800000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:42 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000180)="55950e4c96de874ae9e4e894c7d2b3501e042e5ed5664236e43a17b14ccd4a6b1ffd0623d4d90e9cacc5acaadc54b019dc0e3fcc57e8196e3b4613d59879b275ada64438388fb100d4149390b7792b289443a76503000000000000002566af66c9d43fe0cc54193a6b1f51e2cfe2ffe70ae21bcccca4736e17f50a0000")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x32e, 0x83)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
recvfrom$inet(r0, &(0x7f0000000100)=""/5, 0x5, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10)

23:59:42 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x10]}}}}, 0x48)

23:59:42 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306247, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:42 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1174.064527] binder: 9338:9339 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1174.081861] binder: BINDER_SET_CONTEXT_MGR already set
[ 1174.095198] binder: 9344:9345 ioctl 40046207 0 returned -16
[ 1174.104871] binder: 9338:9339 transaction failed 29201/-22, size 64-8 line 3030
[ 1174.112711] binder: 9344:9345 ioctl c0306247 20007000 returned -22
23:59:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x8500000000000000]}}}}, 0x48)

23:59:43 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x281400]}, 0x6)

23:59:43 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffe2}})

[ 1174.161666] binder_alloc: binder_alloc_mmap_handler: 9344 20001000-20004000 already mapped failed -16
[ 1174.171390] binder_alloc: binder_alloc_mmap_handler: 9338 20001000-20004000 already mapped failed -16
[ 1174.190040] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1174.197576] binder: BINDER_SET_CONTEXT_MGR already set
[ 1174.204838] binder: BINDER_SET_CONTEXT_MGR already set
23:59:43 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfffffffd}})

[ 1174.207081] binder: 9344:9358 ioctl c0306247 20007000 returned -22
[ 1174.214713] binder_alloc: 9338: binder_alloc_buf, no vma
[ 1174.222077] binder: 9338:9359 transaction failed 29189/-3, size 64-8 line 2967
[ 1174.230657] binder: 9338:9339 ioctl 40046207 0 returned -16
[ 1174.241800] binder: 9344:9345 ioctl 40046207 0 returned -16
[ 1174.255472] binder: undelivered TRANSACTION_ERROR: 29201
23:59:43 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xe]}, 0x6)

23:59:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xe4ffffff00000000]}}}}, 0x48)

23:59:43 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x54, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:43 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1174.262627] binder: undelivered TRANSACTION_ERROR: 29189
[ 1174.323155] binder: 9374:9375 got transaction with too large buffer
[ 1174.335532] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1174.339765] binder: BINDER_SET_CONTEXT_MGR already set
[ 1174.351196] binder: 9374:9375 transaction failed 29201/-22, size 88-96 line 3126
[ 1174.361596] binder: 9382:9383 ioctl 40046207 0 returned -16
[ 1174.385082] binder_alloc: binder_alloc_mmap_handler: 9374 20001000-20004000 already mapped failed -16
[ 1174.395464] binder_alloc: 9374: binder_alloc_buf, no vma
[ 1174.401066] binder: 9382:9383 transaction failed 29189/-3, size 64-8 line 2967
[ 1174.413125] binder: BINDER_SET_CONTEXT_MGR already set
[ 1174.417945] binder_alloc: binder_alloc_mmap_handler: 9382 20001000-20004000 already mapped failed -16
[ 1174.425855] binder: 9374:9375 ioctl 40046207 0 returned -16
[ 1174.432305] binder_alloc: 9374: binder_alloc_buf, no vma
[ 1174.439443] binder: 9374:9386 transaction failed 29189/-3, size 88-96 line 2967
[ 1174.447256] binder: BINDER_SET_CONTEXT_MGR already set
[ 1174.452656] binder: 9382:9383 ioctl 40046207 0 returned -16
[ 1174.458602] binder_alloc: 9374: binder_alloc_buf, no vma
[ 1174.464140] binder: 9382:9387 transaction failed 29189/-3, size 64-8 line 2967
[ 1174.475052] binder: undelivered TRANSACTION_ERROR: 29189
[ 1174.483600] binder: undelivered TRANSACTION_ERROR: 29201
[ 1174.502115] binder: undelivered TRANSACTION_ERROR: 29189
[ 1174.518155] binder: undelivered TRANSACTION_ERROR: 29189
23:59:43 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x4, 0xfffffffffffffffd)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x111, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
r2 = socket$inet6(0xa, 0x2, 0x80000001)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}})

23:59:43 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf4ffffff00000000}})

23:59:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x2000000000000000]}}}}, 0x48)

23:59:43 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe403000000000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:43 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xeffe0000]}, 0x6)

23:59:43 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0xb800, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:43 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:43 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x940, 0x0)
ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x0, 0x0, 0x3000, 0x1000], 0x6, 0x20, 0x100000001})
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1175.067666] binder: BINDER_SET_CONTEXT_MGR already set
[ 1175.076122] binder_alloc: binder_alloc_mmap_handler: 9396 20001000-20004000 already mapped failed -16
[ 1175.100561] binder: 9401:9405 ioctl 40046207 0 returned -16
23:59:44 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xc0]}}}}, 0x48)

23:59:44 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x9000000]}, 0x6)

23:59:44 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
socket$nl_netfilter(0x10, 0x3, 0xc)

23:59:44 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfeffffff00000000}})

[ 1175.120217] binder: BINDER_SET_CONTEXT_MGR already set
[ 1175.123099] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1175.133838] binder_alloc: 9396: binder_alloc_buf, no vma
[ 1175.140493] binder: 9401:9405 transaction failed 29189/-3, size 64-8 line 2967
[ 1175.167015] binder: 9396:9397 ioctl 40046207 0 returned -16
[ 1175.189512] binder_alloc: binder_alloc_mmap_handler: 9401 20001000-20004000 already mapped failed -16
23:59:44 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x4000000000)
ioctl(r0, 0x8912, &(0x7f00000001c0)="0000bc5d90cce0e8d2332ce9d7b8840000000000")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)

23:59:44 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x4800, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:44 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xfffffff4]}}}}, 0x48)

[ 1175.217173] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:44 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x100000000000000}})

[ 1175.270546] binder: BINDER_SET_CONTEXT_MGR already set
[ 1175.294698] binder_alloc: 9401: binder_alloc_buf, no vma
[ 1175.300307] binder: 9401:9438 transaction failed 29189/-3, size 64-8 line 2967
[ 1175.300368] binder: 9431:9433 ioctl 40046207 0 returned -16
[ 1175.315721] binder: undelivered TRANSACTION_ERROR: 29189
[ 1175.323494] binder: undelivered TRANSACTION_ERROR: 29189
[ 1175.331530] binder_alloc: binder_alloc_mmap_handler: 9431 20001000-20004000 already mapped failed -16
23:59:44 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
clock_gettime(0x7, &(0x7f0000000100))
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
ioctl$TIOCSBRK(r2, 0x5427)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})

23:59:44 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xeffe]}, 0x6)

23:59:44 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x700, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:44 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x5, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1377df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224", [0x0, 0x1]})

23:59:44 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x100000]}}}}, 0x48)

23:59:44 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:44 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfdffffff}})

23:59:44 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x2000, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1176.140922] binder: 9450:9454 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1176.152931] binder: BINDER_SET_CONTEXT_MGR already set
23:59:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x3, &(0x7f0000000340)=[{&(0x7f00000000c0)="9c889a9b319fd25d61352d32e5bdfba88a15be4f0a330392bce41d6fc0eb1e56b7cf132692ab417379bf86fe7b97a35ae67bf8e35db3765acd59e189b62477c7350edfefa74568a7cd00197f76012df547062fe0ce6dc0fef3453838a0545b4b6535e3420d15516fd13f0a7a6fb5", 0x6e, 0x800}, {&(0x7f0000000140)="dd706e061e8befa2d5245e0f8d716ce10f1a9ff00cd698dd396cfd9de14a46ec94ce12fd66fc487c0178293baaf6c3a0e66e1a93d0e236f17513db82fd08ca7e8c98590d7f2154b5312b7d29562533c01a78af7189b26c251c337b6e5691237e0ca04bbd81d7c068c6f27932add5018966271adee4704b32b0d2f8a100ce384a76dc60c3bca746ed36b8cb9b2d1a5c9f1687f1927014c3004a2e101b60457010dd3d5d3aa5407addd17362527b3060acc8405316ea81101e65882e93dff32961b1a097c868b08d9d994063a792b3e268b337428557de88940fe58c", 0xdb}, {&(0x7f00000002c0)="6fe78b9146c3a5601a1f526afd3d2da637ac3c6f7e70b5a6b9a076d19c645428618f8aeb3fd712cda8334de6bbc58b717b519303833baf03d6c7f406d0f39177ceff4e9ff53abae594cf8952149f268ef738", 0x52, 0x39ca02d0}], 0x38, &(0x7f00000003c0)={[{@resize='resize', 0x2c}, {@noquota='noquota', 0x2c}, {@nodiscard='nodiscard', 0x2c}, {@gid={'gid', 0x3d, [0x7f, 0x33, 0x0, 0x0, 0x34, 0x3d, 0x39]}, 0x2c}, {@umask={'umask', 0x3d, [0x78, 0x37, 0x3e]}, 0x2c}, {@gid={'gid', 0x3d, [0x3d, 0x30, 0x0, 0x78]}, 0x2c}, {@integrity='integrity', 0x2c}, {@iocharset={'iocharset', 0x3d, 'maciceland'}, 0x2c}, {@integrity='integrity', 0x2c}]})
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000240), &(0x7f0000000440)=0x10)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:45 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x5000000]}}}}, 0x48)

23:59:45 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x3e8]}, 0x6)

23:59:45 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x4000000}})

[ 1176.182858] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1176.184158] binder: 9450:9454 transaction failed 29201/-22, size 64-8 line 3030
[ 1176.193909] binder: 9449:9451 ioctl 40046207 0 returned -16
[ 1176.249932] binder_alloc: binder_alloc_mmap_handler: 9450 20001000-20004000 already mapped failed -16
[ 1176.261793] binder_alloc: binder_alloc_mmap_handler: 9449 20001000-20004000 already mapped failed -16
[ 1176.277607] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1176.283440] binder: BINDER_SET_CONTEXT_MGR already set
[ 1176.292855] binder: BINDER_SET_CONTEXT_MGR already set
23:59:45 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x7000000}})

23:59:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8910, &(0x7f0000000040)="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")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:45 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x60, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

[ 1176.315638] binder: 9449:9451 ioctl 40046207 0 returned -16
[ 1176.320080] binder_alloc: 9450: binder_alloc_buf, no vma
[ 1176.327000] binder: 9450:9473 transaction failed 29189/-3, size 64-8 line 2967
23:59:45 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xf401000000000000]}, 0x6)

[ 1176.363213] binder: 9450:9454 ioctl 40046207 0 returned -16
[ 1176.389629] binder: undelivered TRANSACTION_ERROR: 29201
[ 1176.396812] binder: undelivered TRANSACTION_ERROR: 29189
[ 1176.420942] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1176.474920] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:46 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:46 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xffffffe4]}}}}, 0x48)

23:59:46 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0xfffffdfd, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:46 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:46 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c727b784a46b22cd3d999cbc6b7d0c0224", [0x359]})
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x620000)
fsync(r2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

23:59:46 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd8ff0000}})

23:59:46 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x4002000000000000]}, 0x6)

23:59:46 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:46 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x30]}}}}, 0x48)

[ 1177.198117] binder: BINDER_SET_CONTEXT_MGR already set
[ 1177.209835] binder_alloc: binder_alloc_mmap_handler: 9516 20001000-20004000 already mapped failed -16
[ 1177.227136] binder: 9512:9522 ioctl 40046207 0 returned -16
[ 1177.237990] binder: BINDER_SET_CONTEXT_MGR already set
23:59:46 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040))
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={<r1=>0x0, 0x7}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x98, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x40}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @rand_addr=0x3}, @in={0x2, 0x4e22}, @in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e23, 0x3, @loopback={0x0, 0x1}}]}, &(0x7f0000000240)=0x10)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:46 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x7})

23:59:46 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1f00}})

[ 1177.259874] binder_alloc: 9516: binder_alloc_buf, no vma
[ 1177.262261] binder: 9516:9521 ioctl 40046207 0 returned -16
[ 1177.265576] binder: 9512:9522 transaction failed 29189/-3, size 64-8 line 2967
[ 1177.275962] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:46 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x2000000000000]}, 0x6)

[ 1177.321548] binder: BINDER_SET_CONTEXT_MGR already set
23:59:46 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)

23:59:46 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xc00000000000000]}}}}, 0x48)

23:59:46 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x74, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1177.357334] binder: 9512:9544 transaction failed 29189/-22, size 64-8 line 2852
[ 1177.364631] binder: 9512:9522 ioctl 40046207 0 returned -16
[ 1177.382962] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:46 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:46 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe0ff000000000000}})

23:59:46 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x8000000]}, 0x6)

[ 1177.412668] binder_alloc: binder_alloc_mmap_handler: 9512 20001000-20004000 already mapped failed -16
23:59:46 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:46 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x10080)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=<r2=>0x0, &(0x7f0000000140)=0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23, 0x1, @empty, 0x9}}, 0x80000001, 0x1000, 0x3, 0x100000000, 0x8}, &(0x7f0000000240)=0x98)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000300)={0x40, 0xdf})
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r4 = dup2(r1, r1)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000002c0)={r4, 0x80000001, 0xb4b, r0})
accept4$packet(r0, &(0x7f0000000580)={0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000005c0)=0x14, 0x80800)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000600)={@mcast2={0xff, 0x2, [], 0x1}, 0x5f, r5})

23:59:46 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x3000000]}}}}, 0x48)

[ 1177.460517] binder_alloc: binder_alloc_mmap_handler: 9559 20001000-20004000 already mapped failed -16
[ 1177.473092] binder: undelivered TRANSACTION_ERROR: 29189
[ 1177.486277] binder: undelivered TRANSACTION_ERROR: 29189
23:59:46 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x28]}, 0x6)

23:59:46 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd9ff0000}})

23:59:46 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={<r2=>r0})
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={<r3=>0x0, 0x5}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0x80000001}, &(0x7f0000000140)=0x8)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1177.542560] binder: BINDER_SET_CONTEXT_MGR already set
[ 1177.551158] binder: BINDER_SET_CONTEXT_MGR already set
[ 1177.557867] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1177.572717] binder: 9577:9579 ioctl 40046207 0 returned -16
23:59:46 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x40000000]}}}}, 0x48)

[ 1177.588908] binder: 9559:9561 ioctl 40046207 0 returned -16
[ 1177.600557] binder_alloc: 9559: binder_alloc_buf, no vma
[ 1177.606217] binder: 9577:9579 transaction failed 29189/-3, size 64-8 line 2967
[ 1177.641878] binder_alloc: binder_alloc_mmap_handler: 9577 20001000-20004000 already mapped failed -16
[ 1177.693083] binder: 9577:9590 transaction failed 29189/-22, size 64-8 line 2852
[ 1177.700913] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1177.723196] binder: undelivered TRANSACTION_ERROR: 29189
[ 1177.733965] binder: undelivered TRANSACTION_ERROR: 29189
23:59:47 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x26b5, 0x20000)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x10000, 0x0)
memfd_create(&(0x7f0000000340)='/dev/vcsa#\x00', 0x1)
fanotify_mark(r2, 0x4c, 0x653fc028acdbfbe2, r3, &(0x7f0000000300)='./file0\x00')
r4 = perf_event_open(&(0x7f0000000500)={0x200000002, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x400)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=<r6=>0x0)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={[], 0x0, 0x7172, 0x0, 0x10000, 0x6, r6})
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:47 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x1000000, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:47 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
getpgid(r2)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:47 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6)

23:59:47 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd4ff0000}})

23:59:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x3000000000000000]}}}}, 0x48)

23:59:47 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:47 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1178.225431] binder: 9610:9612 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1178.231973] binder: BINDER_SET_CONTEXT_MGR already set
[ 1178.258892] binder: 9599:9604 ioctl 40046207 0 returned -16
23:59:47 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="026689079c64b7ab8f70cab3d4e7334704229d")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:47 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x9000000}})

23:59:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xffff0000]}}}}, 0x48)

[ 1178.271177] binder: 9610:9612 transaction failed 29201/-22, size 64-8 line 3030
[ 1178.280549] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1178.297321] binder_alloc: binder_alloc_mmap_handler: 9599 20001000-20004000 already mapped failed -16
[ 1178.308346] binder_alloc: binder_alloc_mmap_handler: 9610 20001000-20004000 already mapped failed -16
23:59:47 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x100000000000000]}, 0x6)

[ 1178.321571] binder: BINDER_SET_CONTEXT_MGR already set
[ 1178.327336] binder: BINDER_SET_CONTEXT_MGR already set
[ 1178.338548] binder: 9599:9604 ioctl 40046207 0 returned -16
[ 1178.346946] binder: 9610:9612 ioctl 40046207 0 returned -16
[ 1178.365488] binder_alloc: 9610: binder_alloc_buf, no vma
23:59:47 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d347000000000")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xc400)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
syz_open_dev$mice(&(0x7f0000000880)='/dev/input/mice\x00', 0x0, 0x101400)
pipe(&(0x7f0000000940))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/cuse\x00', 0x80, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000a80)="6370757365742e6d656d6f72795f0a24bab4737572650032433dff0ee326e9c9f21c15c6cfd28e16aceb337f83ff3fa4bef7742155ce86afe1daf0dfe84cd49bf8abf897a0b999de15d907797a68aea55a292fa3cf79eda8eb1c08365ed3411f1478126979e9440e410cc40c2a1ac5d0af304b23430f45684c279df6f30a249cf42d", 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000800)={0x5dc, 0x1, {0x2, 0x3, 0x0, 0x3}})
get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x20, &(0x7f0000ffc000/0x1000)=nil, 0x1)
keyctl$get_security(0x11, r2, &(0x7f0000000100)=""/171, 0xab)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x60000000})
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e22, 0x675f, @mcast1={0xff, 0x1, [], 0x1}, 0x9507}, {0xa, 0x4e23, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x8001}, 0x100, [0xfffffffffffffffc, 0x7ff, 0x6, 0x81, 0x200, 0x700000, 0x7f, 0x1]}, 0x5c)
pselect6(0x40, &(0x7f0000000340)={0x0, 0x9, 0x6, 0x257, 0x8, 0x74, 0x40, 0x1}, &(0x7f0000000380)={0x2, 0xe9f0, 0x2efe, 0x0, 0xff, 0x19e32a5f, 0x8001}, &(0x7f00000003c0)={0xf8, 0x2, 0x89e, 0xffff, 0x3, 0xff, 0xffffffffffffffff, 0xfffffffffffffff9}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000440)={0x4}, 0x8})
ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000005c0)={0x12000, 0x7fff})
r5 = syz_open_pts(0xffffffffffffffff, 0x208702)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000740)={{0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8}, {0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000}, 0x80000000, [0x80000001, 0x7, 0x4, 0x8, 0x80, 0x3, 0x80000001, 0xfffffffffffffff8]}, 0x5c)
ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000007c0))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef01005ceb4fd2e515217e010000006e5fbe5a000000003e8b1a0826bb290000000001000000000000000bc4", 0x65, 0x400}], 0x0, &(0x7f0000012e00)=ANY=[@ANYBLOB='\x00'])
rt_sigreturn()
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000240)={0x5, 0x800, 0x3ff})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/dev_snmp6\x00')
setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000234045f95a6c897bca6d2a4a00adef220265b23d2456be989d409b360af0ae515ad612946fc057699a68cf176ec55e4cc0262cb82448cde1b3152ec71887a4065300e0c39896c95a270d"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa8)

23:59:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xe4ffffff]}}}}, 0x48)

23:59:47 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x7000000, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:47 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfeffffff}})

[ 1178.371127] binder: 9610:9622 transaction failed 29189/-3, size 64-8 line 2967
[ 1178.423327] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1178.428506] binder: undelivered TRANSACTION_ERROR: 29201
[ 1178.439893] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1178.448352] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (b000000)
[ 1178.454175] binder: undelivered TRANSACTION_ERROR: 29189
[ 1178.474127] binder_alloc: binder_alloc_mmap_handler: 9643 20001000-20004000 already mapped failed -16
[ 1178.518825] binder: BINDER_SET_CONTEXT_MGR already set
[ 1178.533757] binder: 9643:9644 ioctl 40046207 0 returned -16
23:59:48 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x801)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x400000)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xffff, 0x8204, 0x3, 0x8, <r3=>0x0}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={r3, 0x4}, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:48 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xf4010000]}, 0x6)

23:59:48 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:48 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1f00, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf00]}}}}, 0x48)

23:59:48 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xa}})

23:59:48 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000000)={0x7004, 0x101000})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0xa000000000000, 0x0, 0x9, 0xc57, 0x10000, 0x10001, 0x100000001, 0x3, <r3=>0x0}, &(0x7f0000000140)=0x20)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000001c0)='/\\security,\x00')
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x0, 0x2f}, 0x8)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x98040)
ioctl$LOOP_SET_STATUS64(r4, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd70f00000000000046cee342cc09b1897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f96b3df4d8500", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224", [0x0, 0xfffffffffffffffc]})

23:59:48 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0xb8000000, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1179.365404] binder_alloc: binder_alloc_mmap_handler: 9652 20001000-20004000 already mapped failed -16
[ 1179.388885] binder: BINDER_SET_CONTEXT_MGR already set
[ 1179.407363] binder: 9662:9665 ioctl 40046207 0 returned -16
23:59:48 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffff, 0x4200)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/120)
syz_init_net_socket$nfc_llcp(0x27, 0x200000000000003, 0x1)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224", [0x0, 0xffffffffffffffff]})
timer_create(0x3, &(0x7f0000000280)={0x0, 0x3b, 0x4, @thr={&(0x7f0000000100)="7acc9bc7cea7a01fde04b93e8d72b08f379a759b0e76b473175f789cdf21b6da5e564b06060e6b507b5936ad67ce2f868872dcd6a323c2540ddfcea1cd4fd0b680960b7fbabba016c7a5", &(0x7f0000000180)="e2b53eb7d8942103dd99217dd0caf47e3f2f34b31bea938ea292cb52103144eaa7a83f47f71e7caed078fc07b12b5b411d75f39e32c78b681de4686eda1db5d25d67a4d4ef8c5dec85e52d8c9613d97643e095b7a33f622187d497b12122b51cbe682dbdad897bd387a1b129bd970590e948d747c105b381cc68a4ace05b7eb40fde10d3eec0d164c06dfa945ba0105e1a5d165249669c2fc0c249f06a09cfa5ce6f7fdffc2a743e08935dfbf4264f372cf81bc3d02c04e8edd4387db862d3b03d6e6953016052fba648c24538721a506130ddf5b5767328"}}, &(0x7f00000002c0)=<r3=>0x0)
faccessat(r1, &(0x7f0000000400)='./file0\x00', 0x4, 0x800)
r4 = accept(r0, &(0x7f0000000300)=@xdp, &(0x7f0000000580)=0x80)
connect$l2tp(r4, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x2, 0x3, {0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x10}}}, 0x3a)
timer_getoverrun(r3)
faccessat(r0, &(0x7f0000000380)='./file0\x00', 0x100, 0x27ba2a8359eb3575)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000440)={'bond_slave_0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}})

23:59:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xfeffffff00000000]}}}}, 0x48)

23:59:48 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x700]}, 0x6)

23:59:48 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x4c000000, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:48 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xc0ed0000}})

[ 1179.414714] binder: BINDER_SET_CONTEXT_MGR already set
[ 1179.425622] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1179.436249] binder: 9652:9654 ioctl 40046207 0 returned -16
[ 1179.445625] binder_alloc: 9652: binder_alloc_buf, no vma
[ 1179.451226] binder: 9662:9665 transaction failed 29189/-3, size 64-8 line 2967
[ 1179.501435] binder_alloc: binder_alloc_mmap_handler: 9662 20001000-20004000 already mapped failed -16
[ 1179.537604] binder_alloc: binder_alloc_mmap_handler: 9682 20001000-20004000 already mapped failed -16
23:59:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x600000000000000]}}}}, 0x48)

23:59:48 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)={0xc0, 0xc, [0x1ff, 0x8, 0x5]})
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c8, 0x36, 0xe00, 0x70bd28, 0x25dfdbfe, {0x11}, [@nested={0x90, 0x77, [@generic="151fc7ac8438d32c2b96262bd07b5f1ffeadcd495714ef1a5f7e13d75ecd511d6e513cacd10bdc4b3dc1", @typed={0x8, 0x4b, @ipv4=@loopback=0x7f000001}, @typed={0x10, 0x7f, @str='/dev/loop#\x00'}, @generic="9cf239cac21e65b768f4b63c8c30828f117402cfdd900f015f68e48808f86b2c92c0fadc8f1abe826823c77b5b070e5fdad18609b86ed9e8f1f9d7ad027d3526b59741b53487cd"]}, @generic="51992f903863751daf8fecced410a84315f37ecc41c319736712b3e58ab8ba3be97091c04a32fc75261138db57e75e2f2bf431017db13ebd8ce494fb52bcdfba2b919927647d8fc7d4628132570c7ef3f813565114f59c7ea968c6cf00847932005bbda87a7ca05772ee156e446b7925b34cb52fab23fe21aca98fe31267bcaf5a10c745df8af574a2dcfbd06595aab0", @generic="3cb661a65208156a96ab0bf3219e7d21573f11e44fc43f1fedff5de44c911e95c6ffcc566fa59e929769f14f4b8fb11ed9e5b6d220a5b9a6b6ddc69f28e2228e0031a9abdc7d16822ff4664d85318d0a9af78d77cfcb3c53093804c5de53583147915cad4d5e4f3db71424ec01332f3bd365b44921e1c33bca3ae6839bd17b16b0355ceaebc492371ffeb66bbe6f37bc879dac"]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x4000080)

[ 1179.547615] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1179.567923] binder: BINDER_SET_CONTEXT_MGR already set
[ 1179.573331] binder: BINDER_SET_CONTEXT_MGR already set
[ 1179.578729] binder: 9662:9665 ioctl 40046207 0 returned -16
[ 1179.584613] binder: 9682:9685 ioctl 40046207 0 returned -16
[ 1179.590503] binder_alloc: 9682: binder_alloc_buf, no vma
23:59:48 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdbff000000000000}})

[ 1179.596200] binder: 9662:9680 transaction failed 29189/-3, size 64-8 line 2967
[ 1179.645477] binder: undelivered TRANSACTION_ERROR: 29189
[ 1179.656629] binder: undelivered TRANSACTION_ERROR: 29189
23:59:49 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x758d19c9, 0xff}, 0x2)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:49 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x4002]}, 0x6)

23:59:49 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:49 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x700, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:49 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
fsync(r0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x54380, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000080)=""/61, &(0x7f00000000c0)=0x3d)
fcntl$dupfd(r0, 0x406, r2)

23:59:49 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:49 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x7000000]}}}}, 0x48)

23:59:49 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xd7ff000000000000}})

[ 1180.556844] binder: 9715:9717 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1180.570232] binder: BINDER_SET_CONTEXT_MGR already set
[ 1180.596489] binder: 9707:9710 ioctl 40046207 0 returned -16
23:59:49 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000000, 0x5)
ioctl(r0, 0x3f, &(0x7f00000002c0)="025cc8396d345f4ee72e92")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
finit_module(r1, &(0x7f0000000180)='/dev/loop#\x00', 0x3)
pipe2(&(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x80000)
ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000140))
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r3 = getpgid(0xffffffffffffffff)
fstat(r1, &(0x7f0000000080))
syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/net\x00')

23:59:49 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xc00]}}}}, 0x48)

23:59:49 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x101000, 0x0)
ioctl$KDDISABIO(r2, 0x4b37)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7)
write$P9_RREADDIR(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="a6000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c653000000000000000000000000000000000006fbdeed8ed86e5a047d8000000000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530000000000000000000000000000000000000000000000781002f66696c65303cfe80b9d986226737a4fe4fb4fee8cde19aef7c829e6f5ce790167308f468ca1de0798f34547dfd88"], 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})

[ 1180.606990] binder: 9715:9717 transaction failed 29201/-22, size 64-8 line 3030
[ 1180.626853] binder_alloc: binder_alloc_mmap_handler: 9707 20001000-20004000 already mapped failed -16
[ 1180.627934] binder_alloc: binder_alloc_mmap_handler: 9715 20001000-20004000 already mapped failed -16
[ 1180.647426] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:49 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x4]}, 0x6)

[ 1180.657132] binder: BINDER_SET_CONTEXT_MGR already set
[ 1180.662702] binder: BINDER_SET_CONTEXT_MGR already set
[ 1180.674120] binder: 9715:9717 ioctl 40046207 0 returned -16
[ 1180.688111] binder: 9707:9710 ioctl 40046207 0 returned -16
[ 1180.697394] binder_alloc: 9715: binder_alloc_buf, no vma
23:59:49 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x900]}}}}, 0x48)

[ 1180.702990] binder: 9715:9728 transaction failed 29189/-3, size 64-8 line 2967
23:59:49 executing program 3:
r0 = creat(&(0x7f0000000380)='./file0\x00', 0x111)
write$fuse(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="200000000100000001000000000000000010000000000000010000000000000061a2b285a5cd2ef0bc0a9c77b143b57c38135fa45081d71e626f79c13ffd0bd603cada16a91b423eb562d23a861ee7f3a041441896b32d146c38e6ed8b6a65edaff1412e45d0ea4cf1fdbf7f8e6b4f9099b08e9798b6c376cbec66113e0428ced24e70c30d13e0964168d3f703449d13e25add2ec131927499513a6c2cbc9216e6deb0c04bc541cc9412f0a70d78538cc2f7a9"], 0x20)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x40)
write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7)
pipe2$9p(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000500)={<r4=>0x0, 0x78, &(0x7f0000000480)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e24, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x7fff}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3ff}]}, &(0x7f0000000600)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000640)={r4, 0x9}, &(0x7f0000000680)=0x8)
write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r3, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c})

23:59:49 executing program 4:
r0 = socket$inet6(0xa, 0x7, 0x5)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000440)={0x3, [0xfff, 0x100, 0x1fe0000]}, &(0x7f0000000580)=0xa)
r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x7, 0x400000)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)={<r2=>0x0, 0x4f, "033cd017ad6fe350dd511126b62bfe38e647cd32c62dc46d1e4b2e0a2f422035c7a80240064180c5ee60e588362e6c0e271afc572540cc91c03f36f3bdb932115db37d861a6503067603fa8072159f"}, &(0x7f0000000340)=0x57)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={r2, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x7, 0x3ff, 0x3, 0x7fff, 0xc6}, 0x98)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80, 0x2)
ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000001c0)={0x800000000000000, 0x3004, 0x8, 0xa, 0x1c})
r5 = socket$inet(0x2, 0x80000, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={<r6=>0x0, 0x8, 0x7}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e23}}, 0x8, 0x8, 0x2a, 0x3, 0x20}, 0x98)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000005c0)={0x1, 0x8})
ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8)

[ 1180.745365] binder: undelivered TRANSACTION_ERROR: 29201
[ 1180.751418] binder: undelivered TRANSACTION_ERROR: 29189
23:59:49 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x852a687300000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1180.804587] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1180.886351] binder: 9761:9763 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1180.895465] binder: 9761:9763 transaction failed 29201/-22, size 64-8 line 3030
[ 1180.904415] binder_alloc: binder_alloc_mmap_handler: 9761 20001000-20004000 already mapped failed -16
[ 1180.915687] binder: BINDER_SET_CONTEXT_MGR already set
[ 1180.921280] binder: 9761:9763 ioctl 40046207 0 returned -16
[ 1180.927589] binder_alloc: 9761: binder_alloc_buf, no vma
[ 1180.933155] binder: 9761:9765 transaction failed 29189/-3, size 64-8 line 2967
[ 1180.942592] binder: undelivered TRANSACTION_ERROR: 29201
[ 1180.954520] binder: undelivered TRANSACTION_ERROR: 29189
23:59:50 executing program 1:
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e)
r1 = epoll_create1(0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x7})

23:59:50 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x48, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:50 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x240]}, 0x6)

23:59:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x3f00]}}}}, 0x48)

23:59:50 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe403, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:50 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:50 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x1660000000000000, &(0x7f0000000280)="025cc82d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1181.492069] binder: 9777:9780 unknown command 0
[ 1181.495492] binder: BINDER_SET_CONTEXT_MGR already set
[ 1181.509049] binder: 9777:9780 ioctl c0306201 20007000 returned -22
[ 1181.527872] binder_alloc: binder_alloc_mmap_handler: 9777 20001000-20004000 already mapped failed -16
23:59:50 executing program 4:
r0 = socket$inet6(0xa, 0xb, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
read(r0, &(0x7f0000000040)=""/252, 0xfc)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x23255]}}}}, 0x48)

[ 1181.533832] binder: 9778:9786 ioctl 40046207 0 returned -16
[ 1181.549620] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1181.570101] binder: BINDER_SET_CONTEXT_MGR already set
[ 1181.575737] binder_alloc: 9777: binder_alloc_buf, no vma
[ 1181.578908] binder: 9777:9780 ioctl 40046207 0 returned -16
23:59:50 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xeffe000000000000]}, 0x6)

[ 1181.581381] binder: 9778:9786 transaction failed 29189/-3, size 64-8 line 2967
[ 1181.596732] binder: 9777:9790 unknown command 0
[ 1181.622216] binder: 9777:9790 ioctl c0306201 20007000 returned -22
23:59:50 executing program 4:
r0 = socket$inet6(0xa, 0x20000000000006, 0x8)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x3f, @local={0xfe, 0x80, [], 0xaa}, 0x7f}], 0x1c)
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000000c0)={0x0, 0x7fffffff})
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x8800000]}}}}, 0x48)

23:59:50 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x2, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1181.636371] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1181.658759] binder_alloc: binder_alloc_mmap_handler: 9778 20001000-20004000 already mapped failed -16
23:59:50 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c4f2fd61c4648e1350122b190c500"])

23:59:50 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1ec, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:50 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x28000000]}, 0x6)

[ 1181.703840] binder_alloc: 9778: binder_alloc_buf, no vma
[ 1181.710229] binder: 9778:9808 transaction failed 29189/-3, size 64-8 line 2967
[ 1181.724355] binder: BINDER_SET_CONTEXT_MGR already set
[ 1181.737914] binder: 9810:9816 ioctl 40046207 0 returned -16
[ 1181.744410] binder: 9810:9816 unknown command 16456
[ 1181.781556] binder: 9810:9816 ioctl c0306201 20007000 returned -22
[ 1181.793868] binder: undelivered TRANSACTION_ERROR: 29189
[ 1181.801762] binder: undelivered TRANSACTION_ERROR: 29189
[ 1181.821071] binder_alloc: binder_alloc_mmap_handler: 9810 20001000-20004000 already mapped failed -16
[ 1181.836396] binder: 9810:9831 unknown command 16456
[ 1181.841742] binder: 9810:9831 ioctl c0306201 20007000 returned -22
23:59:51 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0xc)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})

23:59:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xfbffffff00000000]}}}}, 0x48)

23:59:51 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:51 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xa00]}, 0x6)

23:59:51 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfdfdffff00000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:51 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:51 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x6000000000000000, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:51 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x80000)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x16d5)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})

23:59:51 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xfc, [], 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000000c0)=""/252}, &(0x7f0000000240)=0x78)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

[ 1182.468679] binder: BINDER_SET_CONTEXT_MGR already set
[ 1182.468703] binder_alloc: binder_alloc_mmap_handler: 9845 20001000-20004000 already mapped failed -16
[ 1182.496267] binder: 9839:9843 ioctl 40046207 0 returned -16
23:59:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xfeffffff]}}}}, 0x48)

23:59:51 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xc9]}, 0x6)

23:59:51 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0000664b3a475d8ea9977bcd64646e6f", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x130, 0x0)

[ 1182.525474] binder: BINDER_SET_CONTEXT_MGR already set
[ 1182.543496] binder_alloc: 9845: binder_alloc_buf, no vma
[ 1182.544152] binder: 9845:9847 ioctl 40046207 0 returned -16
[ 1182.549254] binder: 9839:9843 transaction failed 29189/-3, size 64-8 line 2967
[ 1182.565499] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:51 executing program 4:
socket$inet6(0xa, 0x1000000000002, 0xffffffff7ffff7ac)
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfffffffffffffffb, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0x2)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x20000000]}}}}, 0x48)

23:59:51 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x6c000000, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1182.607927] binder_alloc: 9839: binder_alloc_buf, no vma
[ 1182.613581] binder: 9839:9868 transaction failed 29189/-3, size 64-8 line 2967
[ 1182.626483] 9pnet: Insufficient options for proto=fd
23:59:51 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x0)

[ 1182.671857] 9pnet: Insufficient options for proto=fd
[ 1182.680104] binder: BINDER_SET_CONTEXT_MGR already set
[ 1182.687716] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1182.698763] binder: 9878:9880 ioctl 40046207 0 returned -16
[ 1182.700900] binder_alloc: binder_alloc_mmap_handler: 9839 20001000-20004000 already mapped failed -16
[ 1182.734785] binder_alloc: binder_alloc_mmap_handler: 9878 20001000-20004000 already mapped failed -16
[ 1182.764567] binder: undelivered TRANSACTION_ERROR: 29189
[ 1182.770463] binder: undelivered TRANSACTION_ERROR: 29189
23:59:52 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x440000, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000000c0)={0x3b, 0x20, 0x10, 0xa, 0x1, 0xde, 0x6, 0xde, 0x1})

23:59:52 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x8055000000000000]}, 0x6)

23:59:52 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xfffffffffffff000]}}}}, 0x48)

23:59:52 executing program 3:
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x1)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x2)
ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000002c0)=0xfffffffffffffeff)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})

23:59:52 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5000000, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:52 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x852a6273, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000000340)=""/255, 0xff}], 0x4, &(0x7f0000000440)=""/21, 0x15, 0x7fffffff}, 0x20}, {{&(0x7f0000000580)=@pppol2tpin6={0x0, 0x0, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/49, 0x31}], 0x1, &(0x7f0000000680)=""/144, 0x90, 0xb29}, 0xf3a}], 0x2, 0x2021, &(0x7f00000007c0)={0x0, 0x989680})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000800)=0x20000, 0x4)
r2 = syz_open_dev$loop(&(0x7f0000000840)='/dev/loop#\x00', 0x8000000400, 0x82)
r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000080)={@hyper})
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:52 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x48000000, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:52 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x6000000]}}}}, 0x48)

[ 1183.505979] binder_alloc: binder_alloc_mmap_handler: 9899 20001000-20004000 already mapped failed -16
[ 1183.515849] binder: BINDER_SET_CONTEXT_MGR already set
[ 1183.522192] 9pnet: Insufficient options for proto=fd
[ 1183.538225] binder: 9900:9904 ioctl 40046207 0 returned -16
[ 1183.550552] 9pnet: Insufficient options for proto=fd
23:59:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xf68f, 0x80)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224", [0x200]})
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x430000, 0x0)

23:59:52 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x11000000]}, 0x6)

[ 1183.553177] binder_alloc: 9899: binder_alloc_buf, no vma
[ 1183.561287] binder: 9900:9904 transaction failed 29189/-3, size 64-8 line 2967
[ 1183.563849] binder: BINDER_SET_CONTEXT_MGR already set
[ 1183.589990] binder: 9899:9903 ioctl 40046207 0 returned -16
[ 1183.596274] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
23:59:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8, &(0x7f0000000600)="87f5c8030b2052a42e541c6e40c7111c81594098e3603d419077f22cf8fe8f19fe47aec6006976f9f1cada331d057a5fc8c29a56c92ef475863386f4dd1b7a5d1b3cd0b633ac3a8af9e54c225d3a826ded4f")
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000680)=<r1=>0x0)
move_pages(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000700)=[0x0, 0x0], 0x6)
r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x80800)
mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})
r3 = syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0x2, 0x100)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000440)={0x7, 0xffff, 0x5d0, 0x101})
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000080))
pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="94241a2a5d7092269a2a03f31f3651bfb13b678cb74f8fcd31e4722394831016530e5f8a48fef91fb9ad5091fc075162f56f2a022c0350da38a6f686292313571198a78f65a8ae5a230266da90f7e344c76ad75292cf", 0x56}, {&(0x7f0000000180)="0c12033566c91ab34e8ef8e221f6ad1b6e2de03e489a5f28286ac5dc6c1c906e8fc768ff05dad9f4ddc1d3bb8626d46ceca5242cc009423a80c157e29c5a53b57fe16e485056ccdaf6bd9351c2e71b4b8bb7856751b4cafe4b7ab3fa66496da1fa3713b69458d2493a35b56d71355109039a1800a93fc8c4284f8b308c18506f60bc5392b2a8455377f41082adcb2ab69f3c56570acc5135703ac9df58acc0df7dbdc7824756375af20d19daadd2405b4611153f530751666e84", 0xba}, {&(0x7f00000002c0)="93cf6d652fcb0bb8478cfeef8e56eafc1725dc4bb09b39d8306bd5be8e7d61dccd46adccf354e1f166148403781e378ea680912ff1f4792bbcbe1eed470da91df7be2e92d00a7bc0e6030e2a4594d944ab9d6d8b4c139cb94db07b1df6d88e2cb7367bfbcccc415f89bbe1900a178fcd648757169f7d5bf804ff7af9b1018ee1c1295464d576bab2f2abb0edc3c440702b15a49ceb4f9f48a55124c38e12a60d5e04e3774d16d4d3e09fe9b1bb7cd47c52f2ae7a2878ec521f09b1582a8c27a02bfc8a54cd9e192adacbfa9e71dffefb7678749418ea369e104184a088", 0xdd}, {&(0x7f0000000000)="cf1860aed3747dfb6e923c36f2", 0xd}, {&(0x7f00000003c0)="fa3892d883f29a57acc7d97739960a7b11a1549e40c48e16a9d232f555a3d90a2e8e6954a52912335db01aa1207f2d2ed0cd1df41f0ed44b1ac83611d710aaa6459343875903a16c7a7b5df52c329cabb32d2133", 0x54}, {&(0x7f0000000240)="aa2d40d5fa5b14b2126237078e89e5c9bcd3fe9bf738c3c066ad2190933a6b9e6fbf36303d5dc6cf2b5662d62bb0", 0x2e}], 0x6, 0x0)

[ 1183.607888] 9pnet: Insufficient options for proto=fd
[ 1183.612229] binder_alloc: binder_alloc_mmap_handler: 9900 20001000-20004000 already mapped failed -16
[ 1183.617422] 9pnet: Insufficient options for proto=fd
[ 1183.637797] binder_alloc: 9900: binder_alloc_buf, no vma
[ 1183.643441] binder: 9900:9918 transaction failed 29189/-3, size 64-8 line 2967
23:59:52 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
set_tid_address(&(0x7f0000000140))
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="8a6eae74c2827ef35432ad32da15488415820011dad356c7d82de0d97d502ab6e8a87912ff5bc03621f9ab642300be6c0d602721f1dcd63aa0", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='rfdno', r1}, 0x10)
ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000006c0)={0xffffffff, 0x5, 0x9, 0x2e0d, 0x1})
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000300)={0x3, &(0x7f0000000480)=[{}, {}, {}]})

23:59:52 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x700]}}}}, 0x48)

23:59:52 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x3, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1183.667422] binder: undelivered TRANSACTION_ERROR: 29189
[ 1183.674603] binder: undelivered TRANSACTION_ERROR: 29189
23:59:52 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xc900000000000000]}, 0x6)

[ 1183.713665] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1183.743396] binder: 9931:9933 unknown command 64
[ 1183.755844] 9pnet: Insufficient options for proto=fd
[ 1183.757541] binder: 9931:9933 ioctl c0306201 20007000 returned -22
[ 1183.789886] binder_alloc: binder_alloc_mmap_handler: 9931 20001000-20004000 already mapped failed -16
[ 1183.805631] 9pnet: Insufficient options for proto=fd
[ 1183.818293] binder: BINDER_SET_CONTEXT_MGR already set
[ 1183.823867] binder: 9931:9933 ioctl 40046207 0 returned -16
[ 1183.830060] binder: 9931:9939 unknown command 64
[ 1183.835202] binder: 9931:9939 ioctl c0306201 20007000 returned -22
23:59:53 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000340)=0x3, 0x4)
r1 = epoll_create1(0x0)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0xe0000000})
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000))
epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x9)
r3 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@can, &(0x7f00000001c0)=0x80)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000280)={'veth1_to_bridge\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000440)={0x7})
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000480)={<r4=>0x0, 0xbd, "e0342fca18029c211d7a132887cd19bdefd7e122163a6fdb27637e01a9a8576724874c23f51ad19234a3e027836c877ccfa7c38825209f822374dc597a7ed0556aca94df39368de82e45b5dc16350af7ea740a991fdc16836d7825308622434cb5911cba7d1b51064e456cf29d11562c99b8f88e70d206d6dbd02e2f1ef6214b7fd0c837605a253735e652fc7768a538fa8e9dcfc664ff9522e3c5457a7423f425c186ab91d018d7c177222a2fa15a534bdcbb4bdadc6dab4f2969e1dc"}, &(0x7f0000000400)=0xc5)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000580)={r4, @in={{0x2, 0x4e24}}}, 0x84)

23:59:53 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f00000001c0)=[@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)})

23:59:53 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
pipe(&(0x7f0000000040))
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:53 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xd803, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, [0x78]}, 0x2c}]})

23:59:53 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xffcb]}, 0x6)

23:59:53 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
r2 = open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="a6000000290100000000000000000000000000000000000000000000000000000007002e2f666b6c65320000000000000000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c65300000000000e100000000ffffa301f04a0000000000000700050000006c6530"], 0xa6)
pipe2(&(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x800)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000940)=0xe8)
sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@newqdisc={0x34, 0x24, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, r4, {}, {0xf}, {0xffff, 0xffff}}, [@TCA_RATE={0x8, 0x5, {0x7, 0xe32}}, @TCA_RATE={0x8, 0x5, {0x80000001, 0x8000000080}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r5 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x1, 0x8000)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, <r6=>0x0}, &(0x7f0000000480)=0x14)
setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000004c0)={@loopback=0x7f000001, @multicast1=0xe0000001, r6}, 0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})

23:59:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xff0f]}}}}, 0x48)

23:59:53 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x2000000000000000, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)})

[ 1184.451958] binder: 9948:9953 got transaction with invalid offset (0, min 0 max 64) or object.
[ 1184.463160] binder: 9948:9953 transaction failed 29201/-22, size 64-8 line 3030
[ 1184.472557] binder: BINDER_SET_CONTEXT_MGR already set
23:59:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0xf000000]}}}}, 0x48)

23:59:53 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x4082)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224", [0x0, 0x8]})
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0))

[ 1184.504748] binder: 9950:9954 ioctl 40046207 0 returned -16
[ 1184.515409] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1184.537399] binder_alloc: binder_alloc_mmap_handler: 9950 20001000-20004000 already mapped failed -16
23:59:53 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='x', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x14]}, 0x6)

23:59:53 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7)
r2 = open$dir(&(0x7f0000000340)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c})

[ 1184.546991] binder_alloc: binder_alloc_mmap_handler: 9948 20001000-20004000 already mapped failed -16
[ 1184.568897] binder: BINDER_SET_CONTEXT_MGR already set
[ 1184.574705] binder: BINDER_SET_CONTEXT_MGR already set
23:59:53 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'bond_slave_0\x00'}})
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={<r3=>0xffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18)
ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3c70457b96fb2d4ae6a223e4f58e8b1b7845f29a81f0966cd0a683243ce195bf4c5f77ca523017b1c702ac33f72d6969f31f039f17cc635b08020adc02a82a7", "9d190a3a05048fd1375df915a37f6e46cee342cc09b1783028ab4ac9897b4f94b88ec4931e54ba13321f416f7a60ccbc175e5eb459406cac6a8a3f16b3df4d85", "00919414200a5a46e03159fdf712c0c767b784a46b22cd3d999cbc6b7d0c0224"})

23:59:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8))
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x600]}}}}, 0x48)

[ 1184.599992] binder: 9950:9954 ioctl 40046207 0 returned -16
[ 1184.603195] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "co�"
[ 1184.608657] binder: 9948:9953 ioctl 40046207 0 returned -16
[ 1184.621337] binder_alloc: 9948: binder_alloc_buf, no vma
[ 1184.626904] binder: 9948:9977 transaction failed 29189/-3, size 64-8 line 2967
[ 1184.638285] kasan: CONFIG_KASAN_INLINE enabled
[ 1184.643000] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 1184.651335] general protection fault: 0000 [#1] SMP KASAN
[ 1184.656886] CPU: 0 PID: 9980 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1
[ 1184.665206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1184.674579] RIP: 0010:kfree+0xa0/0x260
[ 1184.678458] Code: 82 cb 01 00 00 48 ba 00 00 00 80 ff 77 00 00 48 01 c2 48 89 df 48 b8 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 c2 <48> 8b 42 08 a8 01 48 8d 48 ff 48 0f 45 d1 4c 8b 6a 18 49 63 75 74 
[ 1184.697860] RSP: 0018:ffff88017e6b75d0 EFLAGS: 00010003
[ 1184.703243] RAX: ffffea0000000000 RBX: 80f741c3d79d9d00 RCX: 1ffff1002fcd6ed8
[ 1184.710520] RDX: 0203c8e70f5e7640 RSI: ffffffff876f3b49 RDI: 80f741c3d79d9d00
[ 1184.717802] RBP: ffff88017e6b75f0 R08: ffff8801bad50640 R09: ffffed002fcd6e8a
[ 1184.725351] R10: ffffed003b5c5930 R11: 0000000000000003 R12: 0000000000000286
[ 1184.732622] R13: ffffffff876f3b83 R14: ffff88017e6b7740 R15: ffff880183b696c0
[ 1184.739914] FS:  00007f08a8f7d700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
[ 1184.745377] binder: undelivered TRANSACTION_ERROR: 29189
[ 1184.748153] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1184.748163] CR2: 0000000000702076 CR3: 00000001ca1ff000 CR4: 00000000001406f0
[ 1184.748178] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1184.774120] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1184.781384] Call Trace:
[ 1184.783995]  p9_client_create+0xf43/0x16c9
[ 1184.788250]  ? p9_client_read+0xc60/0xc60
[ 1184.792415]  ? lock_acquire+0x1e4/0x540
[ 1184.796382]  ? fs_reclaim_acquire+0x20/0x20
[ 1184.800695]  ? lock_release+0xa30/0xa30
[ 1184.804675]  ? __lockdep_init_map+0x105/0x590
[ 1184.809166]  ? kasan_check_write+0x14/0x20
[ 1184.813410]  ? __init_rwsem+0x1cc/0x2a0
[ 1184.817388]  ? do_raw_write_unlock.cold.8+0x49/0x49
[ 1184.822414]  ? __kmalloc_track_caller+0x311/0x760
[ 1184.827268]  ? save_stack+0xa9/0xd0
[ 1184.830918]  ? save_stack+0x43/0xd0
[ 1184.834544]  ? kasan_kmalloc+0xc4/0xe0
[ 1184.838427]  ? kmem_cache_alloc_trace+0x152/0x780
[ 1184.843281]  ? memcpy+0x45/0x50
[ 1184.846556]  v9fs_session_init+0x21a/0x1a80
[ 1184.850887]  ? rcu_note_context_switch+0x730/0x730
[ 1184.855836]  ? do_mount+0x69e/0x1fb0
[ 1184.859720]  ? lock_acquire+0x1e4/0x540
[ 1184.863706]  ? v9fs_show_options+0x7e0/0x7e0
[ 1184.868113]  ? lock_release+0xa30/0xa30
[ 1184.872078]  ? check_same_owner+0x340/0x340
[ 1184.876397]  ? lock_downgrade+0x8f0/0x8f0
[ 1184.880554]  ? kasan_unpoison_shadow+0x35/0x50
[ 1184.885133]  ? kasan_kmalloc+0xc4/0xe0
[ 1184.889010]  ? kmem_cache_alloc_trace+0x318/0x780
[ 1184.893840]  ? kasan_unpoison_shadow+0x35/0x50
[ 1184.898412]  ? kasan_kmalloc+0xc4/0xe0
[ 1184.902291]  v9fs_mount+0x7c/0x900
[ 1184.905827]  ? v9fs_drop_inode+0x150/0x150
[ 1184.910059]  legacy_get_tree+0x118/0x440
[ 1184.914120]  vfs_get_tree+0x1cb/0x5c0
[ 1184.917932]  do_mount+0x6c1/0x1fb0
[ 1184.921842]  ? check_same_owner+0x340/0x340
[ 1184.926161]  ? copy_mount_string+0x40/0x40
[ 1184.930395]  ? retint_kernel+0x10/0x10
[ 1184.934281]  ? copy_mount_options+0x213/0x380
[ 1184.938867]  ? write_comp_data+0x1b/0x70
[ 1184.942951]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1184.948573]  ? copy_mount_options+0x285/0x380
[ 1184.953069]  ksys_mount+0x12d/0x140
[ 1184.956870]  __x64_sys_mount+0xbe/0x150
[ 1184.960845]  do_syscall_64+0x1b9/0x820
[ 1184.964733]  ? finish_task_switch+0x1d3/0x870
[ 1184.969313]  ? syscall_return_slowpath+0x5e0/0x5e0
[ 1184.974242]  ? syscall_return_slowpath+0x31d/0x5e0
[ 1184.979329]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 1184.984366]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 1184.989407]  ? perf_trace_sys_enter+0xb10/0xb10
[ 1184.994086]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1184.998947]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1185.004579] RIP: 0033:0x455e29
[ 1185.007768] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
[ 1185.026945] RSP: 002b:00007f08a8f7cc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1185.034643] RAX: ffffffffffffffda RBX: 00007f08a8f7d6d4 RCX: 0000000000455e29
[ 1185.041915] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000
[ 1185.049187] RBP: 000000000072bea0 R08: 0000000020000380 R09: 0000000000000000
[ 1185.056448] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1185.063729] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000000
[ 1185.070995] Modules linked in:
[ 1185.074188] Dumping ftrace buffer:
[ 1185.077739]    (ftrace buffer empty)
[ 1185.081446] ---[ end trace 358e803a851a10fe ]---
[ 1185.086205] RIP: 0010:kfree+0xa0/0x260
[ 1185.090111] Code: 82 cb 01 00 00 48 ba 00 00 00 80 ff 77 00 00 48 01 c2 48 89 df 48 b8 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 c2 <48> 8b 42 08 a8 01 48 8d 48 ff 48 0f 45 d1 4c 8b 6a 18 49 63 75 74 
[ 1185.109325] RSP: 0018:ffff88017e6b75d0 EFLAGS: 00010003
[ 1185.114681] RAX: ffffea0000000000 RBX: 80f741c3d79d9d00 RCX: 1ffff1002fcd6ed8
[ 1185.121942] RDX: 0203c8e70f5e7640 RSI: ffffffff876f3b49 RDI: 80f741c3d79d9d00
[ 1185.129233] RBP: ffff88017e6b75f0 R08: ffff8801bad50640 R09: ffffed002fcd6e8a
[ 1185.136492] R10: ffffed003b5c5930 R11: 0000000000000003 R12: 0000000000000286
[ 1185.143776] R13: ffffffff876f3b83 R14: ffff88017e6b7740 R15: ffff880183b696c0
[ 1185.151042] FS:  00007f08a8f7d700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
[ 1185.159269] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1185.165249] CR2: 0000000000702076 CR3: 00000001ca1ff000 CR4: 00000000001406f0
[ 1185.172552] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1185.179836] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1185.187106] Kernel panic - not syncing: Fatal exception
[ 1185.193440] Dumping ftrace buffer:
[ 1185.196982]    (ftrace buffer empty)
[ 1185.200693] Kernel Offset: disabled
[ 1185.204303] Rebooting in 86400 seconds..